---
id: "CVE-2026-76826"
kind: "vulnerability"
aliases: ["CVE-2026-76826"]
title: "tsParticles: release workflow lets contributor text run shell commands"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["github-actions", "npm", "package", "tsparticles"]
not_affected_if: ["consumes-package-only", "no-stable-release-workflow"]
published_at: "2026-11-04T23:17:58+00:00"
first_seen_at: "2026-11-05T00:31:00+00:00"
updated_at: "2026-11-05T00:31:51+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76826", "first_seen_at": "2026-11-05T00:31:00+00:00"}]
exploit_sources: []
---

# tsParticles: release workflow lets contributor text run shell commands

tsParticles' stable publish workflow pastes generated release-note text directly into a Bash echo command. Shell characters a contributor puts in that text can run commands on the maintainer's release runner, with access to the release token.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Look for a `.github/workflows` file that publishes stable releases and contains `echo` with `steps.release.outputs.body`
- Check the installed `tsparticles` version with `npm ls tsparticles` and compare it to `4.3.2`

## Fix

- tsParticles: `4.3.2`

## Timeline

- 2026-11-05T00:31:00+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-76826

## Documents

- [advisory] Vendor advisory: github.com https://github.com/tsparticles/tsparticles/security/advisories/GHSA-gw8q-3x59-mjjx
- [fix] Patch: github.com https://github.com/tsparticles/tsparticles/commit/d3b5672bd61bb847abfa21193c34eabf7aba6896

## From the sources

tsParticles is a TypeScript library for creating highly customizable particle animations. From 4.0.0 until 4.3.2, the stable publish workflow interpolates steps.release.outputs.body directly into an echo command in Bash source before writing RAW_RELEASE.md. Contributor-controlled shell metacharacters in generated release-note text can therefore execute when a maintainer starts a stable release, allowing modification of generated artifacts or workspace scripts and affecting later release steps that hold GITHUB_TOKEN and write permissions. This issue is fixed in version 4.3.2.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_