CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Github Security Blog•added 2026/03/25 5:15 p.m.•5 views

@grackle-ai/server: Unescaped Error String in renderPairingPage() HTML Template

Impact The renderPairingPage function embeds the error parameter directly into HTML without escaping: typescript const errorHtml = error ? $error : ""; All current call sites pass hardcoded strings, so this is not exploitable today. However, the function is architecturally fragile — if a future...

5.8AI score

Exploits0References2Affected Software1