CVE-2026-32774
1 advisory.
npm/vulnogram CVE-2026-32774: medium 6.4
Vulnogram contains a stored cross-site scripting vulnerability in comment hypertext handling
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-vggc-6pg2-xvp9
- https://github.com/Vulnogram/Vulnogram/security/advisories/GHSA-pg4p-2985-gvxr
- https://nvd.nist.gov/vuln/detail/CVE-2026-32774
- https://github.com/Vulnogram/Vulnogram/commit/2f0e21b113c58124084c7b74c9768fc241126a05
- https://github.com/Vulnogram/Vulnogram
- https://www.vulncheck.com/advisories/vulnogram-stored-cross-site-scripting-via-comment-hypertext
CVE-2026-32774 · published · modified · JSON