3 matches found
CVE-2026-40472
In hackage-server, user-controlled metadata from .cabal files are rendered into HTML href attributes without proper sanitization, enabling stored Cross-Site Scripting XSS attacks...
9.9CVSS0.00427EPSS
SaveExploits0References1
CVE-2026-40472 Hackage package metadata stored XSS vulnerability
In hackage-server, user-controlled metadata from .cabal files are rendered into HTML href attributes without proper sanitization, enabling stored Cross-Site Scripting XSS attacks...
9.9CVSS5.8AI score0.00427EPSS
SaveExploits0References1
CVE-2026-40472 Hackage package metadata stored XSS vulnerability
In hackage-server, user-controlled metadata from .cabal files are rendered into HTML href attributes without proper sanitization, enabling stored Cross-Site Scripting XSS attacks...
9.9CVSS0.00427EPSS
SaveExploits0References1
20