CVE-2026-111451 | wheels-dev Wheels up to 4.1.1 Deploy Release Version Rollback cross site scripting

October 16, 2026 Yanac

A vulnerability described as problematic has been identified in wheels-dev Wheels up to 4.1.1. This issue affects some unknown processing of the component Deploy Release Version Rollback/Package Removal/Destroy Paths/Package Extraction/Generator Names/Generated Scaffold Show Views/Generated Admin Views/RustCFML Server Commands. The manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-111451. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More