Skip to content

CI4MS Fileeditor allows deletion and rename of critical application files due to missing extension allowlist on destructive operations

Moderate severity GitHub Reviewed Published May 14, 2026 in ci4-cms-erp/ci4ms • Updated May 18, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts