CVE Intelligence

Vulnerabilidades do MI6 Intelligence Community UI Kit canary web components

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam MI6 Intelligence Community UI Kit canary web components: 1 registro(s), com versões afetadas e correções.

CVE-2026-112290 Média · 4.7 CWE-79 19/10/2026
MI6 @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 DOM XSS via ic-tree-item
Intelligence Community UI Kit @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 contains a DOM-based cross-site scripting vulnerability in ic-tree-item that re-parses router-item slot text as HTML. When tree item truncation is enabled, attackers who influence a tree item label can have escaped markup decoded by truncateTreeItemLabel() and executed as JavaScript in visitors' browsers.