TripleLift

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

TripleLift records in CISA KEV

No TripleLift vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-56608 CVE-2026-82019 · GHSA-cf92-q3x8-658f

TripleLift video-bundle.js DOM-based XSS via postMessage

MEDIUM 45

TripleLift's ad rendering script (video-bundle.js) contains a DOM-based cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a publisher's domain by sending crafted…

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00289 Published 2026-09-14 Fixed in 2026-04-28 CWE-79

Open these records in search →

Critical	0
High	0
Medium	0
Low	1
No CVSS	0