CVE-2026-110802 | altair-graphql Altair up to 8.5.7 Iframe Sandbox inject.ts injectScript scriptUrls cross site scripting

A vulnerability classified as problematic has been found in altair-graphql Altair up to 8.5.7. This affects the function injectScript of the file packages/altair-core/src/utils/inject.ts of the component Iframe Sandbox. The manipulation of the argument scriptUrls leads to cross site scripting.

This vulnerability is referenced as CVE-2026-110802. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More