npm/@developer.notchatbot/webchat CVE-2026-30048: medium, EPSS 0.31%
NotChatbot WebChat has a stored cross-site scripting (XSS) vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.5.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-w3vx-52j6-9fjp
- https://nvd.nist.gov/vuln/detail/CVE-2026-30048
- https://app.unpkg.com/@developer.notchatbot/webchat@1.4.4
- https://gist.github.com/0xN4no/0601f398942a29259d217ea650f694fe
- https://github.com/0xN4no/CVE-2026-30048
- https://www.npmjs.com/package/@developer.notchatbot/webchat
CVE-2026-30048 · published · modified · JSON