Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-23769

lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset rule files.

Description

lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset rule files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NAVER lucy-xss-filter

Default version status: affected

  • e5826c0d26b4f546955279767bbe94e5c7ed3f15unaffected

References