CVE-2026-4992

creationtimestamp| type| source ---|---|--- 2026-03-28 02:44:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi3mh42nis2g...

CVE-2026-4992

A flaw has been found in wandb OpenUI up to 1.0. This affects the function createshare/getshare of the file backend/openui/server.py of the component HTMLAnnotator Component. Executing a manipulation of the argument ID can lead to HTML injection. The attack may be performed from remote. The explo...