CVE-2026-126208 | flavorjones Loofah up to 2.25.2 SVG_ALLOW_LOCAL_HREF safelist information disclosure

A vulnerability labeled as problematic has been found in flavorjones Loofah up to 2.25.2. This impacts an unknown function of the component SVG_ALLOW_LOCAL_HREF safelist. Such manipulation leads to information disclosure.

This vulnerability is traded as CVE-2026-126208. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More