Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox

Summary Altair 8.5.7 accepts plugin configuration directly from the iframe-sandbox query string. When pluginsandboxopts contains type: "scripts" and an attacker-controlled URL in scriptUrls, the sandbox page creates a classic element and loads the supplied script. In the intended plugin flow, thi...

EUVD-2026-117794

Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox...

npm: Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox

npm: Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox vulnerability discovered by ? in WordPress npm altair-koa-middleware versions = 7.2.4, 8.5.8...

npm: Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox

npm: Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox vulnerability discovered by ? in WordPress npm altair-static versions = 7.2.4, 8.5.8...

GHSA-752M-7P75-49GF Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox

Summary Altair 8.5.7 accepts plugin configuration directly from the iframe-sandbox query string. When pluginsandboxopts contains type: "scripts" and an attacker-controlled URL in scriptUrls, the sandbox page creates a classic element and loads the supplied script. In the intended plugin flow, thi...

npm: Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox

npm: Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox vulnerability discovered by ? in WordPress npm altair-fastify-plugin versions = 7.2.4, 8.5.8...

npm: Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox

npm: Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox vulnerability discovered by ? in WordPress npm altair-express-middleware versions = 7.2.4, 8.5.8...

CVE-2026-110802

A flaw was found in Altair. The application improperly handles script URLs supplied through URL query parameters in its iframe sandbox, allowing external scripts to be injected into the page without proper sandbox isolation. By convincing a victim to navigate to a specially crafted link, a remote...

CVE-2026-110802

Altair is a GraphQL client for all platforms. From 7.2.4 until 8.5.8, packages/altair-iframe-sandbox/src/main.ts reads pluginsandboxopts from the iframe-sandbox query string and passes attacker-controlled scriptUrls to injectScript in packages/altair-core/src/utils/inject.ts, which creates script...

CVE-2026-110802

The Altair GraphQL client (versions 7.2.4 through 8.5.8 ) is vulnerable to a DOM-based XSS due to improper handling of the plugin_sandbox_opts query string parameter in packages/altair-iframe-sandbox/src/main.ts. An attacker can provide malicious scriptUrls which are passed to injectScript() in p...

CVE-2026-110802

Altair is a GraphQL client for all platforms. From 7.2.4 until 8.5.8, packages/altair-iframe-sandbox/src/main.ts reads pluginsandboxopts from the iframe-sandbox query string and passes attacker-controlled scriptUrls to injectScript in packages/altair-core/src/utils/inject.ts, which creates script...

CVE-2026-110802 Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox

Altair is a GraphQL client for all platforms. From 7.2.4 until 8.5.8, packages/altair-iframe-sandbox/src/main.ts reads pluginsandboxopts from the iframe-sandbox query string and passes attacker-controlled scriptUrls to injectScript in packages/altair-core/src/utils/inject.ts, which creates script...

CVE-2026-110802 Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox

Altair is a GraphQL client for all platforms. From 7.2.4 until 8.5.8, packages/altair-iframe-sandbox/src/main.ts reads pluginsandboxopts from the iframe-sandbox query string and passes attacker-controlled scriptUrls to injectScript in packages/altair-core/src/utils/inject.ts, which creates script...

CVE-2026-110802 Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox

Altair is a GraphQL client for all platforms. From 7.2.4 until 8.5.8, packages/altair-iframe-sandbox/src/main.ts reads pluginsandboxopts from the iframe-sandbox query string and passes attacker-controlled scriptUrls to injectScript in packages/altair-core/src/utils/inject.ts, which creates script...

Cross-site scripting vulnerability in Altair GraphQL Client

The Altair GraphQL Client contains a security vulnerability. This vulnerability arises because packages/altair-iframe-sandbox/src/main.ts reads pluginsandboxopts from the iframe-sandbox query string and passes attacker-controlled scriptUrls to injectScript in...

CVE-2026-110802: altair-graphql: Altair is a GraphQL client for all platforms

Altair is a GraphQL client for all platforms. From 7.2.4 until 8.5.8, packages/altair-iframe-sandbox/src/main.ts reads pluginsandboxopts from the iframe-sandbox query string and passes attacker-controlled scriptUrls to injectScript in packages/altair-core/src/utils/inject.ts, which creates script...

PT-2026-137734

Name of the Vulnerable Software and Affected Versions Altair versions 7.2.4 through 8.5.7 Description In the packages/altair-iframe-sandbox/src/main.ts file, the application reads plugin sandbox opts from the iframe-sandbox query string and passes attacker-controlled scriptUrls to the injectScrip...

CVE-2026-120987

Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment...

CVE-2026-120987

Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment...

CVE-2026-120987

Versions of NAVER Whale Browser prior to 5.39.412.57 are vulnerable to an input validation error (CWE-346) that allows an attacker to bypass the iframe sandbox in a dual-tab environment. While the vulnerability's impact on integrity is noted as high, the documents do not provide specific details ...