cookpete
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| auto-changelog | 1 | – | Oct 5, 2026 |
Exploited and recent CVEs
- CVE-2026-12171 auto-changelog: code execution via untrusted in-repository configuration (handlebarsSetup/plugins), plus argument injection, path traversal, and SSRF 0.2%