CVE-2026-23769: XSS
lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset rule files.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23769?
CVE-2026-23769 is classified as a high severity vulnerability due to its potential to allow attackers to execute malicious JavaScript.
How do I fix CVE-2026-23769?
To fix CVE-2026-23769, update the lucy-xss-filter package to a version after commit e5826c0 where the improper sanitization issue is resolved.
What is the vulnerability in CVE-2026-23769?
CVE-2026-23769 is caused by improper sanitization of input due to misconfigured default superset rule files, allowing for potential XSS attacks.
Who is affected by CVE-2026-23769?
Developers using the lucy-xss-filter package prior to commit e5826c0 are vulnerable to CVE-2026-23769.
What types of attacks can CVE-2026-23769 enable?
CVE-2026-23769 can enable Cross-Site Scripting (XSS) attacks, where attackers can inject and execute malicious scripts in a user's browser.