Weakness
Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)
References
Find the bug before an attacker does.
Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.