CVE-2026-27068

Name of the Vulnerable Software and Affected Versions Ryan Howard Website LLMs.Txt versions through 8.2.6

Description The Ryan Howard Website LLMs.Txt software contains a flaw related to improper input handling during web page generation, specifically a Reflected Cross-Site Scripting (XSS) issue. This allows for the injection of malicious scripts into web pages. The vulnerability exists due to insufficient sanitization of user-supplied input, potentially enabling an attacker to execute arbitrary code within the context of a user's browser. The affected component is Website LLMs.Txt.

Recommendations Update Ryan Howard Website LLMs.Txt to a version later than 8.2.6.