CVE-2026-116004 | onyx-dot-app Onyx up to 5.0.0 PreviewTab.tsx cross site scripting (GHSA-grhq-88h5-2h86)

October 24, 2026 Yanac

A vulnerability marked as problematic has been reported in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file web/src/app/craft/components/output-panel/PreviewTab.tsx. The manipulation leads to cross site scripting.

This vulnerability is documented as CVE-2026-116004. The attack can be initiated remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More