CVE-2026-66920

Name of the Vulnerable Software and Affected Versions Pivotick (affected versions not specified)

Description An uncontrolled-recursion issue occurs when processing caller-supplied graph and node data. The problem exists because graph algorithms recursively traverse edges and the JSON viewer recursively processes node data structures. A specially crafted graph with circular object references, deeply nested properties, or an excessively long path can exhaust the JavaScript call stack during layout calculations or when displaying a node in the inspection modal. This can lead to a client-side denial of service, manifesting as an uncaught exception, a frozen page, or a browser tab crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.