CVE Intelligence

Xpf0000 vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Xpf0000 products: 1 record(s), with severity, exploitation and fixes.

FlyEnv 1

Exploited only (KEV) →

CVE-2026-69116 Medium · 6.1 CWE-79 Aug 10, 2026
FlyEnv < 4.18.0 Cross-Site Scripting via v-html
FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives. Attackers can inject malicious scripts through markdown sources or chat messages that execute in the Electron renderer process with access to Node.js APIs and the filesystem.