npm/msdoc-viewer CVE-2026-91127: high 8.2, EPSS 0.40%
File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer
Action: Upgrade msdoc-viewer to 0.2.2 or later.
npm i msdoc-viewer@0.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.2 | - |
Fixed versions
| 0.2.2 |
Sources
- osv: GHSA-3753-m2x2-q623#npm/msdoc-viewer
- https://github.com/flyfish-dev/file-viewer/security/advisories/GHSA-3753-m2x2-q623
- https://github.com/flyfish-dev/file-viewer/commit/ef045680f8d9830a3eee9612f7df46a734361b07
- https://github.com/flyfish-dev/file-viewer
- https://github.com/flyfish-dev/file-viewer/releases/tag/v2.3.1
CVE-2026-91127 · published · modified · JSON