Threats tagged 'ghsa-f3f8-mxmv-8237'

1 threat

Threats tagged 'ghsa-f3f8-mxmv-8237'
Severity	CVSS	Threat	Source	Published	Score and star
Medium	3.5	CVE-2026-116004A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. (CVE-2026-116004) Medium3.52026-10-25GCVE DatabaseCVE-2026-116004 CVE-2026-116004 is a cross-site scripting (XSS) vulnerability in the onyx-dot-app Onyx product, specifically affecting version 5.0.0. The vulnerability exists in an unknown function within the file web/src/app/craft/components/output-panel/PreviewTab.tsx. The flaw allows remote attackers to execute XSS attacks. The vulnerability has been publicly disclosed, but the vendor has not responded or provided a fix. The CVSS 4.0 score rates this as a medium severity issue. Vulnerability #ghsa-f3f8-mxmv-8237	GCVE Database	2026-10-25

Showing 1–1 of 1 result