VYPR

lichess.org

by Lichess.org

CVEs (1)

  • CVE-2026-35208MedApr 6, 2026
    risk 0.28cvss 5.4epss 0.00

    lichess.org is the forever free, adless and open source chess server. Any approved streamer can inject arbitrary HTML into /streamer and the homepage “Live streams” widget by placing markup in their Twitch/YouTube stream title. CSP is present and blocks inline script…