Medium severity6.3NVD Advisory· Published Jun 19, 2026· Updated Jun 22, 2026

CVE-2026-21768

Description

The compose-rich-editor library (v1.0.0-rc14) used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed in certain situations.

Affected products

HCL Software/Verse for Androidllm-create
Range: <=1.0.0-rc14

Patches

Vulnerability mechanics

References

support.hcl-software.com/csmnvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000