CVE-2026-77394
1 advisory.
npm/@openc3/vue-common CVE-2026-77394: high 7.6, EPSS 0.39%
OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widget
Action: Upgrade @openc3/vue-common to 7.3.0 or later.
npm i @openc3/vue-common@7.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.6 | 7.3.0 | - |
Fixed versions
| 7.3.0 |
Sources
- osv: GHSA-gvf2-2rh5-mpgf
- https://github.com/OpenC3/cosmos/security/advisories/GHSA-gvf2-2rh5-mpgf
- https://github.com/OpenC3/cosmos/pull/3560
- https://github.com/OpenC3/cosmos/commit/10371f8f410b9ad588f98dfa3befaaacb6587cd3
- https://github.com/OpenC3/cosmos
- https://github.com/OpenC3/cosmos/releases/tag/v7.3.0
CVE-2026-77394 · published · modified · JSON