npm/@leanprover/unicode-input-component CVE-2026-32732: unknown 0, EPSS 0.31%
XSS in @leanprover/unicode-input-component
Action: Upgrade @leanprover/unicode-input-component to 0.2.0 or later.
npm i @leanprover/unicode-input-component@0.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.0 | - |
Fixed versions
| 0.2.0 |
Sources
- osv: GHSA-6ggm-pwr9-r5h2
- nvd: CVE-2026-32732
- https://github.com/leanprover/vscode-lean4/security/advisories/GHSA-6ggm-pwr9-r5h2
- https://github.com/leanprover/vscode-lean4/pull/735
- https://github.com/leanprover/vscode-lean4
- https://leanprover.zulipchat.com/#narrow/channel/113488-general/topic/weird.20behavior.20in.20loogle.20searchbar/near/578502003
CVE-2026-32732 · published · modified · JSON