CVE-2025-2700

Name of the Vulnerable Software and Affected Versions michelson Dante Editor versions up to 0.4.4

Description A problematic issue has been discovered, affecting an unknown part of the Insert Link Handler component. This leads to cross-site scripting and can be initiated remotely. The issue has been publicly disclosed.

Recommendations For versions up to 0.4.4, as a temporary workaround, consider restricting access to the Insert Link Handler component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.