CVE-2026-79320

Stencil core 4.43.5 contains a DOM-based XSS vulnerability in its component runtime . When a downstream application enables the experimental slot fixes option and uses scoped components , assigning a string to the textContent property of a component's host element causes the value to be parsed as...