CVE-2026-3990

CesiumJS up to v1.137.0 is affected by CVE-2026-3990 due to a cross-site scripting flaw in a code path involving Apps/Sandcastle/standalone.html where an attacker can manipulate the argument c. The issue is exploitable remotely and an exploit has been released publicly; however, the CVE descripti...