CVE-2026-73159

Name of the Vulnerable Software and Affected Versions cti-transmute (affected versions not specified)

Description An issue exists where a tag's icon value can be stored and subsequently interpolated into HTML using Vue's v-html directive. The mapIcon() function previously constructed an HTML string directly from the user-supplied icon value, allowing a crafted value to break the intended markup and inject attacker-controlled HTML. This can lead to the execution of malicious payloads in the viewer's browser, including within the administrative triage interface.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.