medium6.1
CVE-2026-23769
lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset …
Impact
lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset rule files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Naver | Lucy-Xss-Filter | before 2025-06-08 |