Medium severity6.1NVD Advisory· Published Jan 16, 2026· Updated Jun 17, 2026
CVE-2026-23769
CVE-2026-23769
Description
lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset rule files.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:naver:lucy-xss-filter:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:naver:lucy-xss-filter:*:*:*:*:*:*:*:*range: <2025-06-08
- (no CPE)range: <e5826c0
- (no CPE)range: e5826c0d26b4f546955279767bbe94e5c7ed3f15
Patches
Vulnerability mechanics
References
2- github.com/naver/lucy-xss-filter/pull/32nvdPatch
- cve.naver.com/detail/cve-2026-23769.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.