Threats affecting pkg:github/lockerproject/Locker

CVE-2026-3951 is a medium severity cross-site scripting (XSS) vulnerability affecting LockerProject Locker versions 0.0.0, 0.0.1, and 0.1.0. The flaw exists in the authIsAwesome function within the Error Response Handler component, specifically in the file registry.js. An attacker can remotely manipulate the ID argument to inject malicious scripts, potentially leading to user session hijacking or phishing attacks.