PT-2026-96236

Name of the Vulnerable Software and Affected Versions Stencil core version 4.43.5 Description A DOM-based cross-site scripting XSS issue exists in the component runtime. When a downstream application enables the experimental slot fixes option and utilizes scoped components, assigning a string to...

CVE-2026-79320: Improper Neutralization of Input During Web Page Generation

Stencil core 4.43.5 contains a DOM-based cross-site scripting XSS vulnerability in the component runtime. When a downstream application enables the experimental slot fixes option and uses scoped components, assigning a string to the textContent property of such a component's host element causes t...

CVE-2026-79320

Stencil core 4.43.5 contains a DOM-based cross-site scripting XSS vulnerability in the component runtime. When a downstream application enables the experimental slot fixes option and uses scoped components, assigning a string to the textContent property of such a component's host element causes t...