CVE-2026-126945

The Zipline application, prior to version 4.5.1 , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw within the HighlightCode component . The root cause is the rendering of unescaped file content before the highlight.js library finishes loading. This allows authenticated attackers to uploa...