Threats tagged 'ghsa-cw7r-mhgg-m7v3'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	2.0	CVE-2026-118492In Eclipse Langium versions 3.0.0 and later, the langium-sprotty package does not HTML-escape diagnostic messages Low2.02026-11-09GCVE DatabaseCVE-2026-118492 Eclipse Langium versions 3.0.0 and later have a vulnerability in the langium-sprotty package where diagnostic messages are not HTML-escaped before rendering in hover popups. This allows attacker-controlled JavaScript to execute in the browser or webview when a malicious source file triggers an unresolved cross-reference diagnostic containing HTML markup. Report on CVE-2026-118492 Vulnerability CWE-79 #ghsa-cw7r-mhgg-m7v3	GCVE Database	2026-11-09

Page 1 of 1