rrweb-io CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM rrweb-io CVE published 2026-04-09

CVE-2025-45806

A cross-site scripting (XSS) vulnerability exists in rrweb-snapshot before v2.0.0-alpha.18, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload. The vulnerability has a CVSS score of 6.1 and a severity of MEDIUM. This vulnerability affects web applications that utilize rrweb-snapshot, requiring defenders to verify version and assess exposure. Defenders should review and updat [truncated]