Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-45118 |
|
Vulnerability in CVE-2026-45118 (CVE-2026-45118)
vulnerability in CVE-2026-45118 (CVE-2026-45118). Confidential information can be exposed externally. Exploitable via `Referer header`.
|
| CVE-2026-62324 |
|
Cross-Site Scripting (XSS) in jodit (CVE-2026-62324)
cross-site scripting in jodit (CVE-2026-62324). Risk of unauthorized operations or information disclosure. Exploitable via ``sanitizeHTMLElement``. Mitigation: upgrade to `4.12.31` or later.
|
| CVE-2026-59727 |
|
Cross-Site Scripting (XSS) in astro (CVE-2026-59727)
cross-site scripting in astro (CVE-2026-59727). Risk of unauthorized operations or information disclosure. Exploitable via ``attrs``. Mitigation: upgrade to `7.0.4` or later.
|
| CVE-2026-48591 |
|
Cross-Site Scripting (XSS) in earmark (CVE-2026-48591)
cross-site scripting in earmark (CVE-2026-48591). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53841 |
|
Cross-Site Scripting (XSS) in openclaw (CVE-2026-53841)
cross-site scripting in openclaw (CVE-2026-53841). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.5.12` or later.
|
| CVE-2026-53722 |
|
Cross-Site Scripting (XSS) in nuxt (CVE-2026-53722)
cross-site scripting in nuxt (CVE-2026-53722). Risk of unauthorized operations or information disclosure. Exploitable via ``href``. Mitigation: upgrade to `3.21.7` or later.
|
| CVE-2026-45669 |
|
Vulnerability in nuxt (CVE-2026-45669)
vulnerability in nuxt (CVE-2026-45669). Risk of unauthorized operations or information disclosure. Exploitable via ``Location``. Mitigation: upgrade to `4.4.6` or later.
|