Read the docs

preactjs

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

preactjs records in CISA KEV

No preactjs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Preact 1 record HIGH

Records

1 record in Preact · all components

TI-2026-17722 CVE-2026-22028 · GHSA-36hm-qxxp-pg3m

Preact has JSON VNode Injection issue

Priority HIGH 67

Preact, a lightweight web development framework, JSON serialization protection to prevent Virtual DOM elements from being constructed from arbitrary JSON.

CVSS 4.0HIGH 7.2 Network No auth No interaction EPSS 0.00273 Published 2026-01-08 Partial fix · 10.26.10, 10.27.3 +1 CWE-843
Open these records in search →