CVE-2026-49259
1 advisory.
Packagist/nukeviet/nukeviet CVE-2026-49259: high 8.7
NukeViet: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Action: Upgrade nukeviet/nukeviet to 4.6.00 or later.
composer require nukeviet/nukeviet:4.6.00Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.6.00 | - |
Fixed versions
| 4.6.00 |
Sources
- osv: GHSA-w2w5-w2pw-r929
- https://github.com/nukeviet/nukeviet/security/advisories/GHSA-w2w5-w2pw-r929
- https://github.com/nukeviet/nukeviet
CVE-2026-49259 · published · modified · JSON