CVE-2021-37596

CVE-2021-37596 affects Telegram Web K Alpha 0.6.1. A cross-site scripting vulnerability arises because the application allows XSS to pass through document names, with potential for client-side code execution. Connected sources corroborate the issue; however, no remediation steps or patch versions...

CVE-2021-40532

Telegram Web K Alpha before 0.7.2 is affected by a vulnerability where the application mishandles characters in a document extension. The issue is described across multiple sources as affecting Telegram Web K Alpha prior to version 0.7.2, with no additional exploit details provided in the documen...