CVE-2026-30691

CVE-2026-30691 - भेद्यता सलाह CVE-2026-30691 के लिए आधिकारिक MITRE भेद्यता रिकॉर्ड विवरण और तकनीकी दस्तावेज़ीकरण। root@kitploit: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Suggested description Cross-Site Scripting XSS vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attacker...

CVE-2026-30691

Cross-Site Scripting XSS vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via a crafted .txt file. The TXTRenderer component fails to sanitize file content and explicitly casts raw data as a ReactNode...

@cyntler/react-doc-viewer's TXTRenderer fails to sanitize file content and explicitly casts raw data as a ReactNode

Cross-Site Scripting XSS vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via a crafted .txt file. The TXTRenderer component fails to sanitize file content and explicitly casts raw data as a ReactNode...

@bentwnghk/chat (>=1.54.2, <=1.107.2), @bu-sail/s3-viewer (>=0.0.1-alpha.1, <=0.1.0-alpha.6) +135 more potentially affected by CVE-2026-30691 via @cyntler/react-doc-viewer (>=1.10.3, <=1.17.1)

@cyntler/react-doc-viewer NPM version =1.10.3, =1.54.2, =0.0.1-alpha.1, =1.1.0, =1.0.0, =1.0.1, =1.3.0, =1.3.0, =1.0.0, =0.0.1-beta.12, =2.0.0-dev-58 and more Source cves: CVE-2026-30691 Source advisory: SNYK:JS-CYNTLERREACTDOCVIEWER-17818153...

@bentwnghk/chat (>=1.54.2, <=1.107.2), @bu-sail/s3-viewer (>=0.0.1-alpha.1, <=0.1.0-alpha.6) +135 more potentially affected by CVE-2026-30691 via @cyntler/react-doc-viewer (>=1.10.3, <=1.17.1)

@cyntler/react-doc-viewer NPM version =1.10.3, =1.54.2, =0.0.1-alpha.1, =1.1.0, =1.0.0, =1.0.1, =1.3.0, =1.3.0, =1.0.0, =0.0.1-beta.12, =2.0.0-dev-58 and more Source cves: CVE-2026-30691 Source advisory: OSV:GHSA-FVHG-P4HF-79X3...

CVE-2026-30691

Cross-Site Scripting XSS vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via a crafted .txt file. The TXTRenderer component fails to sanitize file content and explicitly casts raw data as a ReactNode...

CVE-2026-30691

Cross-Site Scripting XSS vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via a crafted .txt file. The TXTRenderer component fails to sanitize file content and explicitly casts raw data as a ReactNode...

PT-2026-42214

Name of the Vulnerable Software and Affected Versions @cyntler/react-doc-viewer version 1.17.1 Description A Cross-Site Scripting XSS issue exists where remote attackers can execute arbitrary JavaScript by using a crafted .txt file. This occurs because the TXTRenderer component does not sanitize...

react-doc-viewer 跨站脚本漏洞

react-doc-viewer is a React documentation viewer component developed by Damian Cyntler. Version 1.17.1 of react-doc-viewer contains a cross-site scripting vulnerability. This vulnerability arises from the TXTRenderer component failing to clean up file content and explicitly converting raw data in...

CVE-2026-30691

Cross-Site Scripting XSS vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via a crafted .txt file. The TXTRenderer component fails to sanitize file content and explicitly casts raw data as a ReactNode...