getplumber/plumber

v0.3.23 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 9d Pipelines

✓ No known CVEs patched

This release patches 1 known CVE

Affected surfaces

rce_ssrf

Summary

AI summary

Fixed template injection in GitHub free‑text controls.

Type	Severity	Summary	CVE
Bugfix	Medium	Scope template injection to free-text GitHub fields. Scope template injection to free-text GitHub fields. Source: llm_adapter@2026-05-28 Confidence: low	—

Full changelog

controls: scope template-injection to free-text github fields (fcfbc05), closes #191

Controls: scoped template‑injection vulnerability to GitHub free‑text fields (closes #191)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track getplumber/plumber

Get notified when new releases ship.

About getplumber/plumber

Beta — feedback welcome: [email protected]