Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Progress Software KendoReact 16.2.0 Clear all filters
TI-2026-86029 CVE-2026-106142 · GHSA-p3r6-vmqw-5grq

Cross-site scripting in Progress Software KendoReact Editor

Priority LOW 24

Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-react-editor) in Progress Software KendoReact versions 2.7.0 through 16.1.0 allows a low-privileged attacker who can supply Editor content to execute ar…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00173 Published 2026-11-06 Fixed in 16.2.0 CWE-79
TI-2026-86025 CVE-2026-106136 · GHSA-c7fg-9fr9-89xp

Cross-site scripting in Progress Software KendoReact Chat component

Priority LOW 24

Cross-Site Scripting (XSS) in the Chat component (@progress/kendo-react-conversational-ui) in Progress Software KendoReact versions 0.6.0 through 16.1.0 allows a low-privileged attacker who can supply Chat messages to ex…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00173 Published 2026-11-06 Fixed in 16.2.0 CWE-79
TI-2026-86021 CVE-2026-106134 · GHSA-6v99-wm53-w5jm

Cross-site scripting in Progress Software KendoReact Menu

Priority LOW 24

Cross-Site Scripting (XSS) in the Menu component (@progress/kendo-react-layout) in Progress Software KendoReact versions 1.3.0 through 16.1.0 allows a low-privileged attacker who can influence the Menu item data to execu…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00173 Published 2026-11-06 Fixed in 16.2.0 CWE-79