CVE-2026-76826

The tsParticles TypeScript library (versions 4.0.0 through 4.3.2 ) is vulnerable to OS Command Injection (CWE-78) within its stable publish workflow. The vulnerability occurs because the workflow interpolates steps.release.outputs.body directly into a Bash echo command when generating RAW_RELEASE...