@amogads/ui (>=1.0.1, <=1.3.6), @bu-sail/s3-viewer (>=0.0.1-alpha.1, <=0.1.0-alpha.6) +136 more potentially affected by CVE-2026-30691 via @cyntler/react-doc-viewer (>=1.10.3, <=1.17.1)

@cyntler/react-doc-viewer NPM version =1.10.3, =1.0.1, =0.0.1-alpha.1, =1.1.0, =1.0.0, =1.0.1, =1.3.0, =1.3.0, =1.0.0, =1.0.1 - @dzwalker/dsh-client-ui-files 0.2.0 and more Source cves: CVE-2026-30691 Source advisory: OSV:GHSA-FVHG-P4HF-79X3...

CVE-2026-30691

Cross-Site Scripting XSS vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via a crafted .txt file. The TXTRenderer component fails to sanitize file content and explicitly casts raw data as a ReactNode...