squidfunk CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM squidfunk CVE published 2026-08-12

CVE-2026-73295

CVE-2026-73295 is a DOM-based cross-site scripting vulnerability in the optional search.suggest feature of Material for MkDocs, from version 7.2.0 to 9.7.6. A crafted q URL parameter can execute JavaScript in a documentation site's origin after user interaction. This issue is fixed in version 9.7.7. The vulnerability requires user interaction to trigger and can lead to JavaScript execution in the document [truncated]