CVE-2026-123094

A flaw was found in Huginn. The application improperly handles OAuth service display names, resulting in a stored cross-site scripting XSS vulnerability. An authenticated attacker can exploit this issue by registering an account with crafted display names or email addresses and sharing it globall...