Packagist/cachethq/cachet CVE-2026-113712: medium 4.8

Cachet has Stored XSS in Incident Component

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-x397-5hrv-j9m9
• nvd: CVE-2026-113712
• https://github.com/cachethq/cachet/security/advisories/GHSA-x397-5hrv-j9m9
• https://github.com/cachethq/core/commit/23adbb88ffa819f92be4a905ff1d812670d980a2
• https://github.com/cachethq/core/commit/57b44a8bac0b250b0d5751e93e0349070d14606e
• https://github.com/cachethq/cachet

CVE-2026-113712 · published 2026-10-20T21:09:40Z · modified 2026-10-20T21:15:04.024300311Z · JSON