Threats tagged 'ghsa-wq84-cxfr-wg2c'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-121588TeXlyre from 0.11.0 before 0.13.5 contains a stored cross-site scripting vulnerability that allows attackers to Medium5.32026-11-03GCVE DatabaseCVE-2026-121588 TeXlyre versions from 0.11.0 up to but not including 0.13.5 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows attackers to execute malicious scripts by supplying crafted LSP or typesetter recipe icons containing HTML event handlers. Successful exploitation can lead to persistent script execution, potentially exposing local projects and repository credentials to attackers. Report on CVE-2026-121588 Vulnerability CWE-79 #ghsa-wq84-cxfr-wg2c	GCVE Database	2026-11-03

Page 1 of 1