CVE-2026-116004

A security vulnerability exists in onyx-dot-app Onyx up to version 5.0.0 . The flaw resides in an unknown function within the file web/src/app/craft/components/output-panel/PreviewTab.tsx. This vulnerability allows for Remote Cross-Site Scripting (XSS) . The exploit has been disclosed publicly an...

PT-2026-122935

Name of the Vulnerable Software and Affected Versions onyx-dot-app Onyx versions prior to 5.0.1 Description A remote cross site scripting issue exists within an unknown function of the file web/src/app/craft/components/output-panel/PreviewTab.tsx. Cross site scripting is a technique where malicio...