Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in lud oaskit allows reflected cross-site scripting via the default HTML error handler.
CVSS 4.0MEDIUM 5.1·Network·No auth·User interaction·EPSS 0.00367·Published 2026-08-03·Fixed in 0.14.1CWE-79