CVE-2026-54594

Name of the Vulnerable Software and Affected Versions OmniBlocks versions prior to June 6, 2026

Description The .github/workflows/disc.yml workflow triggers on issues opened and edited events. When an issue is classified as off-topic, it invokes the createDiscussion mutation. Because the system does not record if an issue has already been converted or suppress duplicate runs, a user can repeatedly edit an off-topic issue's description before the initial conversion finishes. This allows the creation of multiple discussions for a single issue, resulting in discussion spam and increased moderation effort.

Recommendations Update to the version containing commit 627e0f0a16a7d74b09128106b57dd7e85d2545df.