Please report security issues and vulnerabilities to security@qgis.org
Security: qgis/QGIS
Security
SECURITY.md
-
[AgentGG] Stored XSS in WFS3 getFeatures HTML page via unescaped feature attribute valuesGHSA-cr49-pm9v-m788 published
Aug 11, 2026 by m-kuhnModerate -
Critical validated RCE and Repository Takeover via GitHub ActionsGHSA-7h99-4f97-h6rw published
Jan 24, 2026 by m-kuhnCritical
Learn more about advisories related to qgis/QGIS in the GitHub Advisory Database