qgis vulnerabilities (Ubuntu)

2 vulnerabilities.

• qgis Ubuntu QGIS: Stored XSS in WFS3 getFeatures HTML page via unescaped feature attribute values CVE-2026-104140 Fix available 6.1 MediumOctober 12, 2026
• qgis Ubuntu QGIS had validated RCE and Repository Takeover via GitHub Actions CVE-2026-24480 Public exploit 8.7 HighJanuary 27, 2026