Overview · GoogleChromeLabs/extension-update-testing-tool · GitHub

Security

No security policy detected

This project has not set up a SECURITY.md file yet.

Report a vulnerability

Unauthenticated path traversal in `/upload/directory`, CSRF-reachable from any web origin while the tool is running (RCE-grade on dev machines)
GHSA-hj79-6rf6-grhh published Jun 18, 2026 by oliverdunk

High

Learn more about advisories related to GoogleChromeLabs/extension-update-testing-tool in the GitHub Advisory Database