CVE-2026-55839 | Kestra up to 1.3.23 Markdown parser link.ts cross site scripting

August 18, 2026 Yanac

A vulnerability classified as problematic was found in Kestra up to 1.3.23. This vulnerability affects unknown code of the file ui/src/utils/markdown_plugins/link.ts of the component Markdown parser. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-55839. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More