Unrated severityNVD Advisory· Published Jan 16, 2026· Updated Jan 16, 2026

CVE-2026-23769

Description

lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset rule files.

Affected products

lucy-xss-filter/lucy-xss-filterllm-create
Range: before commit e5826c0
NAVER/lucy-xss-filterv5
Range: e5826c0d26b4f546955279767bbe94e5c7ed3f15

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

cve.naver.com/detail/cve-2026-23769.htmlmitrevendor-advisory
github.com/naver/lucy-xss-filter/pull/32mitremitigation

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000