CVE-2026-126946

Zipline versions 4.3.0 before 4.5.0 are vulnerable to a stored cross-site scripting (XSS) flaw in SSR meta tags. The root cause is the failure to escape input for embed settings , specifically the embedTitle, embedDescription, embedSiteName, and embedColor fields. Authenticated low-privilege user...