Please see the DHS Vulnerability Disclosure Policy for details about how we handle vulnerability disclosure.
Security: cisagov/Malcolm
Security
SECURITY.md
-
RCE via unrestricted .php upload to the file-upload componentGHSA-8cvp-m7pg-qrp7 published
Jun 15, 2026 by mmgueroHigh
Learn more about advisories related to cisagov/Malcolm in the GitHub Advisory Database