CVE-2026-124689

Progress Kendo UI for jQuery versions 2026.3.1014 up to, but not including, 2026.4.1110, are vulnerable to Cross-Site Scripting (XSS) via the ActionSheet component. The root cause is the failure to encode title , subtitle , and header button label values before rendering. An attacker capable of i...

EUVD-2026-123599

In Progress Kendo UI for jQuery versions 2026.3.1014 up to, but not including, 2026.4.1110, ActionSheet does not encode title, subtitle, and header button label values before rendering them. An attacker who can influence these values can inject markup that executes as JavaScript when a user opens...

EUVD-2025-198886

Malicious code in @actbase/react-native-actionsheet npm...

MAL-2025-190792 Malicious code in @actbase/react-native-actionsheet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae1a1462b9108d5110a08a20c9b012655de4a80374dbc0a430ec2207c8ffd457 The package @actbase/react-native-actionsheet was found to contain malicious code. Source: ghsa-malware...

Malware in @actbase/react-native-actionsheet

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @actbase/react-native-actionsheet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae1a1462b9108d5110a08a20c9b012655de4a80374dbc0a430ec2207c8ffd457 The package @actbase/react-native-actionsheet was found to contain malicious code. Source: ghsa-malware...