npm/vulnogram CVE-2026-32774: medium 6.4, EPSS 0.28%

Vulnogram contains a stored cross-site scripting vulnerability in comment hypertext handling

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-vggc-6pg2-xvp9
• https://github.com/Vulnogram/Vulnogram/security/advisories/GHSA-pg4p-2985-gvxr
• https://nvd.nist.gov/vuln/detail/CVE-2026-32774
• https://github.com/Vulnogram/Vulnogram/commit/2f0e21b113c58124084c7b74c9768fc241126a05
• https://github.com/Vulnogram/Vulnogram
• https://www.vulncheck.com/advisories/vulnogram-stored-cross-site-scripting-via-comment-hypertext

CVE-2026-32774 · published 2026-03-16T15:30:43Z · modified 2026-04-02T13:41:06.065726624Z · JSON