GHSA-W937-FG2H-XHQ2 locize Client SDK: Cross-origin DOM XSS & Handler Hijack Through Missing e.origin Validation in InContext Editor

Summary Versions of the locize client SDK the browser module that wires up the locize InContext translation editor prior to 4.0.21 register a window.addEventListener"message", … handler that dispatches to registered internal handlers editKey, commitKey, commitKeys, isLocizeEnabled,...

CVE-2026-34062

creationtimestamp| type| source ---|---|--- 2026-04-22 20:24:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk4dcrkwpm2t...

CVE-2026-34415

creationtimestamp| type| source ---|---|--- 2026-04-22 20:01:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4bzgzyko2r 2026-04-22 21:21:17+00:00| published-proof-of-concept| Telegram/he0Z1Xxb4PMjQ5eYVBKNYLHtJZg-G0d3XJmG72co7nWMuw 2026-04-23 07:30:28+00:00| seen|...

CVE-2026-41468

creationtimestamp| type| source ---|---|--- 2026-04-22 20:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4bz7iiyc2k 2026-04-22 21:21:17+00:00| published-proof-of-concept| Telegram/he0Z1Xxb4PMjQ5eYVBKNYLHtJZg-G0d3XJmG72co7nWMuw 2026-04-23 09:00:28+00:00| seen|...

CVE-2026-35368

creationtimestamp| type| source ---|---|--- 2026-04-22 19:03:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk46smokds2l 2026-04-22 19:23:16+00:00| seen| Telegram/y1XO5mBm2flLcrjS5YpFLtlumq47M984z8tJCHSwnxFgvg 2026-04-29 16:48:01+00:00| seen|...

CVE-2018-25270

creationtimestamp| type| source ---|---|--- 2026-04-22 17:12:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3yl7zcvv2h 2026-05-31 19:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mn6ctysno32z...

CVE-2018-25269

creationtimestamp| type| source ---|---|--- 2026-04-22 16:37:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3wnoofme2i...

CVE-2018-25265

creationtimestamp| type| source ---|---|--- 2026-04-22 16:35:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3wis6de62v 2026-05-31 07:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mn52mjrfc72v...

CVE-2018-25261

creationtimestamp| type| source ---|---|--- 2026-04-22 16:26:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3vyiwriq2p 2026-04-22 19:13:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mk47dxvtxa25 2026-05-28 19:37:07+00:00| seen|...

CVE-2026-6862

creationtimestamp| type| source ---|---|--- 2026-04-22 16:20:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3voy6zmc2r...

CVE-2026-6855

creationtimestamp| type| source ---|---|--- 2026-04-22 15:17:53+00:00| seen| Telegram/QeC7MO7ScSSiOVGXLKN0WnA843zzLxkQwsFJUKCqjpspjuY 2026-04-22 16:10:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mk3v4dutit25...

CVE-2026-6857

creationtimestamp| type| source ---|---|--- 2026-04-22 15:17:53+00:00| seen| Telegram/QeC7MO7ScSSiOVGXLKN0WnA843zzLxkQwsFJUKCqjpspjuY 2026-04-22 16:11:33+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mk3v6kcmme2t 2026-04-22 20:10:15+00:00| seen|...

CVE-2026-1913

creationtimestamp| type| source ---|---|--- 2026-04-22 13:13:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3laa6wof2r 2026-04-24 15:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkatxnvegv2q...

CVE-2026-1930

creationtimestamp| type| source ---|---|--- 2026-04-22 13:03:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3koddyex2p 2026-04-24 11:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkagkip72a24...

CVE-2026-6396

creationtimestamp| type| source ---|---|--- 2026-04-22 12:58:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3kfevktc2h 2026-04-25 16:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkdhrt47wy24...

CVE-2026-34315

creationtimestamp| type| source ---|---|--- 2026-04-22 12:50:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwqt6xo2w...

CVE-2026-3254

creationtimestamp| type| source ---|---|--- 2026-04-22 12:50:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwdl7pl2u 2026-04-24 07:57:51+00:00| seen| https://ccb.belgium.be/advisories/warning-11-new-vulnerabilities-gitlab-ce-and-ee-editions-patch-immediately...

CVE-2026-1660

creationtimestamp| type| source ---|---|--- 2026-04-22 12:50:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwdl7pl2u 2026-04-24 07:57:51+00:00| seen| https://ccb.belgium.be/advisories/warning-11-new-vulnerabilities-gitlab-ce-and-ee-editions-patch-immediately...

CVE-2026-5262

creationtimestamp| type| source ---|---|--- 2026-04-22 12:50:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwdl7pl2u 2026-04-22 18:14:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk43zvvmkl2c 2026-04-22 19:00:11+00:00| seen|...

CVE-2025-9957

creationtimestamp| type| source ---|---|--- 2026-04-22 12:50:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwdl7pl2u 2026-04-24 07:57:51+00:00| seen| https://ccb.belgium.be/advisories/warning-11-new-vulnerabilities-gitlab-ce-and-ee-editions-patch-immediately...