GitHubNewbie0 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM GitHubNewbie0 CVE published 2026-10-21

CVE-2026-113787

The CVE-2026-113787 vulnerability in the odf-kit library allows for HTML injection leading to Cross-Site Scripting (XSS) attacks via unescaped style attribute values in the odtToHtml() function. This issue affects versions from 0.6.0 up to but not including 0.14.2. The vulnerability arises because the library does not properly escape inline CSS strings, specifically style attribute values, which can lead [truncated]