Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/08/07 10:29 p.m.31 views

CVE-2026-48026 lakeFS vulnerable to stored XSS in rendered markdown previews via raw HTML

lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to version 1.81.1 of the open source edition and 1.84.0 of the enterprise edition, lakeFS Web UI renders markdown files from repository objects without sanitizing the resulting HTML. A user with write...

8.7CVSS0.00219EPSS
SaveExploits0References2
Rows per page
Query Builder