CVE-2026-47665 | Penpot up to 2.14.3 File Comments cross site scripting

August 27, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Penpot up to 2.14.3. Affected by this issue is some unknown functionality of the component File Comments. Executing a manipulation can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-47665. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More