CVE-2026-31153

A stored cross-site scripting XSS vulnerability in Bynder v0.1.394 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

EUVD-2026-19273

A stored cross-site scripting XSS vulnerability in Bynder v0.1.394 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2026-31153

A stored cross-site scripting XSS vulnerability in Bynder before 12 January 2026 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Bynder 安全漏洞

Bynder is a brand content management platform used by Bynder Inc. for the centralized management and distribution of digital media assets. Version 0.1.394 of Bynder contains a security vulnerability, which stems from a storage-side cross-site scripting issue. This vulnerability could allow for th...

CVE-2026-31153

A stored cross-site scripting (XSS) vulnerability in Bynder (a brand content management platform for centralized management and distribution of digital media assets) allows attackers to execute arbitrary web scripts or HTML via a crafted payload. The affected version is v0.1.394 ; per the initial...

CVE-2026-31153

A stored cross-site scripting XSS vulnerability in Bynder before 12 January 2026 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2026-31153

A stored cross-site scripting XSS vulnerability in Bynder before 12 January 2026 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2026-30613

Name of the Vulnerable Software and Affected Versions Bynder version 0.1.394 Description A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML through a crafted payload. Stored XSS occurs when a malicious script is permanently stored on the target serve...

Malicious code in @bynder-private/dragula (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cef45a4e31385eb6ccd00064910e9f82808f62096685b830e3fa41ca17e080d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-159 Malicious code in @bynder-private/dragula (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cef45a4e31385eb6ccd00064910e9f82808f62096685b830e3fa41ca17e080d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...