PT-2026-3221 · Unknown · Lucy-Xss-Filter

Younghun Ko · Publicado 2026-01-16 · Atualizado 2026-01-23 · CVE-2026-23769

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions lucy-xss-filter versions prior to commit e5826c0

Description The software contains a flaw where an attacker can execute malicious JavaScript. This is due to improper sanitization resulting from misconfigured default superset rule files.

Recommendations Update to version e5826c0 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-23769

Produtos afetados

Lucy-Xss-Filter

Referências · 6

• https://github.com/naver/lucy-xss-filter/pull/32 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-23769 · Nota de Segurança
• https://t.me/cveNotify/149728 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2026-23769 · Aviso do Fabricante
• https://cve.naver.com/detail/cve-2026-23769.html · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2012126444999066012 · Publicação no Twitter