Search/CVE-2026-54594
● CVE

CVE-2026-54594

DiscoveredSep 17, 2026UpdatedSep 23, 2026

OmniBlocks is a monorepo for the OmniBlocks project. Prior to the June 6, 2026 workflow remediation, .github/workflows/disc.yml runs for the issues opened event and the issues edited event and invokes the createDiscussion mutation whenever an issue is classified as off-topic, without recording that the issue was already converted or otherwise suppressing duplicate runs. A user who creates one off-topic issue and repeatedly edits its description before conversion completes can therefore cause multiple discussions to be created for the same issue, producing discussion spam and additional moderation work. This issue is fixed with commit 627e0f0a16a7d74b09128106b57dd7e85d2545df.

CVSS v3.1
—
EPSS
0.45%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Sep 19, 2026 → Sep 25, 2026
▲ 0.12pp
0.33% → 0.45% over 2 tracked changes
Connections
1 relationships
Timeline
disclosure → media coverage
Sep 17, 2026
Disclosure — published as a CVE record. · last revised by NVD Sep 23, 2026