VYPR

Legora

by Legora

CVEs (1)

  • CVE-2026-74234HigAug 17, 2026
    risk 0.50cvss 7.7epss

    Legora before 2026-08-14 contains a cross-site scripting vulnerability that allows attackers to achieve arbitrary JavaScript execution in a victim's browser by embedding a Mermaid block prefixed with a gray-matter JavaScript front-matter directive, causing the front-matter…