Vulnerabilidades de MI6

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de MI6: 1 registro(s), com severidade, exploração e correções.

Intelligence Community UI Kit canary web components 1

Somente exploradas (KEV) →

CVE-2026-112290 Média · 4.7 CWE-79 19/10/2026

MI6 @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 DOM XSS via ic-tree-item

Intelligence Community UI Kit @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 contains a DOM-based cross-site scripting vulnerability in ic-tree-item that re-parses router-item slot text as HTML. When tree item truncation is enabled, attackers who influence a tree item label can have escaped markup decoded by truncateTreeItemLabel() and executed as JavaScript in visitors' browsers.