https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T19:57:20.861927+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-82865 fkie_cve-2026-82865 2026-09-28T19:57:21.833972+00:00

pdfme schemas before 5.5.10 contains a cross-site scripting vulnerability in the multiVariableText property panel that assigns unsanitized i18n label values to innerHTML. Attackers who control label overrides through options.labels can inject arbitrary JavaScript that executes when users open the Designer and select a multiVariableText field without variable placeholders.

 https://vulnerability.circl.lu/vuln/ghsa-v7hf-w8f6-4v98 GHSA-v7hf-w8f6-4v98 2026-09-28T19:57:21.834110+00:00

pdfme schemas before 5.5.10 contains a cross-site scripting vulnerability in the multiVariableText property panel that assigns unsanitized i18n label values to innerHTML. Attackers who control label overrides through options.labels can inject arbitrary JavaScript that executes when users open the Designer and select a multiVariableText field without variable placeholders.