Threats Tagged 'cve-2026-47428'
View all threats tagged with 'cve-2026-47428'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-47428'
Click on any threat for detailed analysis and mitigation recommendations
0 Vitest versions from 4.0.17 up to but not including 4.1.6, and version 5.0.0-beta.3, contain a cross-site scripting (XSS) vulnerability in Browser Mode. The vulnerability arises because the otelCarrier query parameter is directly inserted into an inline module script without proper neutralization. This allows crafted URLs to execute arbitrary JavaScript in the Vitest server origin and potentially recover sensitive API tokens. The issue is fixed starting from version 4.1.6 and later. Join the discussion | CVE Database V5 | 07/14/2026, 19:30:19 UTC Added: 07/14/2026, 20:03:48 UTC |
0 A critical security flaw (CVE-2026-47428) was identified in Vitest's Browser Mode, allowing remote attackers to execute arbitrary JavaScript code via a crafted browser-runner URL. This could lead to unauthorized access to the VITEST_API_TOKEN and further system compromise. However, Red Hat products do not include or enable Vitest Browser Mode, using Vitest only as a build/test-time dependency without the vulnerable component. Therefore, Red Hat's shipping products are not vulnerable to this issue. The update includes a bug fix and enhancement for Red Hat Hardened Images RPMs, specifically prometheus3.13 packages. Join the discussion | GCVE Database | 07/13/2026, 23:42:49 UTC Added: 07/19/2026, 19:38:27 UTC |
Showing 1 to 2 of 2 results