Threats Tagged 'cve-2026-55422'

1 threat

Threats Tagged 'cve-2026-55422'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.6	EPSS 0.2%	CVE-2026-55422conda-forge.github.io · Cross-site Scripting Medium4.6EPSS 0.2%2026-10-23CVE Database V5CVE-2026-55422 CVE-2026-55422 is a medium severity cross-site scripting (XSS) vulnerability in the conda-forge.github.io website. The issue arises because two React components render externally-sourced strings directly as HTML using dangerouslySetInnerHTML without sanitization. These strings include raw output from build logs, patch outputs, and tracebacks generated by the conda-forge autotick bot. No patches are publicly available at the time of publication. EPSS 0.2%Vulnerability conda-forge #cwe-79	CVE Database V5	2026-10-23

Showing 1–1 of 1 result