PT-2026-3221
CVE-2026-23769
·
Published
2026-01-16
·
Updated
2026-01-23
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
lucy-xss-filter versions prior to commit e5826c0
Description
The software contains a flaw where an attacker can execute malicious JavaScript. This is due to improper sanitization resulting from misconfigured default superset rule files.
Recommendations
Update to version e5826c0 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾