auto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-changelog file and the auto-changelog key in package.json) into its options, and honors security-sensitive options from that untrusted source. The handlebarsSetup option is passed to require(), so running auto-changelog over attacker-controlled repository content (for example, in a CI workflow that checks out an untrusted pull request head, or locally on a forked or third-party repository) executes attacker-chosen code with the privileges of the invoking user or CI job, including access to workflow secrets, without the repository dependencies ever being installed. The plugins option similarly loads attacker-controlled modules from the repository. Under the same conditions, appendGitLog/appendGitTag allow git argument injection (e.g. --output= to write arbitrary files), output allows writing attacker-influenced content to arbitrary paths, and template causes an outbound request to an attacker-chosen URL. Version 2.6.1 treats in-repository configuration as untrusted and refuses to run when it sets these options, unless the new --unsafe-config flag is passed.
References
Configurations
No configuration.
History
05 Oct 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/cookpete/auto-changelog/security/advisories/GHSA-xpvr-2hvx-m8q4 - |
05 Oct 2026, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-05 17:17
Updated : 2026-10-06 16:08
NVD link : CVE-2026-12171
Mitre link : CVE-2026-12171
CVE.ORG link : CVE-2026-12171
JSON object : View
Products Affected
No product.
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CWE-94Improper Control of Generation of Code ('Code Injection')
CWE-829Inclusion of Functionality from Untrusted Control Sphere
CWE-918Server-Side Request Forgery (SSRF)