CVE-2026-105694 | Penpot up to 2.17.x cross site scripting

October 5, 2026 Yanac

A vulnerability classified as problematic has been found in Penpot up to 2.17.x. Affected is an unknown function. This manipulation causes cross site scripting.

This vulnerability is tracked as CVE-2026-105694. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More