Skip to content

Firefly II has Stored XSS in Audit Log Entry view via piggy bank name (ale.twig)

Moderate severity GitHub Reviewed Published May 21, 2026 in firefly-iii/firefly-iii • Updated Jun 12, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts