TI-2026-48521 CVE-2026-69116 · GHSA-w92g-j683-fhvq
FlyEnv < 4.18.0 Cross-Site Scripting via v-html
Priority MEDIUM 57
FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives.
No xpf0000 vulnerabilities are listed in CISA KEV.
1 record
FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives.