npm/pannellum CVE-2026-27210: medium 6.1, EPSS 0.37%
Pannellum has a XSS vulnerability in hot spot attributes
Action: Upgrade pannellum to 2.5.7 or later.
npm i pannellum@2.5.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.5.0 | 2.5.7 | - |
Fixed versions
| 2.5.7 |
Sources
- osv: GHSA-8423-w5wx-h2r6
- nvd: CVE-2026-27210
- https://github.com/mpetroff/pannellum/security/advisories/GHSA-8423-w5wx-h2r6
- https://github.com/mpetroff/pannellum/commit/9391ef8da6a6a98c6a9f8c97f101adb900523681
- https://github.com/mpetroff/pannellum
CVE-2026-27210 · published · modified · JSON