Denpiligrim CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Denpiligrim CVE published 2026-02-25

CVE-2026-27612

CVE-2026-27612 is a Reflected Cross-Site Scripting (XSS) vulnerability in the Repostat React component. The vulnerability occurs because the `RepoCard` component uses React's `dangerouslySetInnerHTML` to render the repository name during the loading state without any sanitization. This allows an attacker to execute arbitrary JavaScript in the context of the user's browser if a developer passes unvalidated [truncated]