Repository navigation
Security: github/secure_headers
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
CSP directive injection via sandbox, plugin_types, and report_to when given untrusted inputGHSA-rqq5-2gf9-4w4q published
Jun 3, 2026 by KyFaStModerate -
Limited header injection when using dynamic overrides with user inputGHSA-w978-rmpf-qmwg published
Jan 22, 2020 by oreoshakeModerate -
Directive injection when using dynamic overrides with user inputGHSA-xq52-rv6w-397c published
Jan 22, 2020 by oreoshakeModerate