IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-05-20 18:16

MODIFIED

2026-05-20 18:16

EPSS (Prob. Exploit)

0.30%

Top 77.4%

DATA SOURCES:

NVD 🔗 2026-05-20 FIRST EPSS 🔗 2026-11-01 GITHUB 🔗 2026-11-05

> DESCRIPTION

Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via a crafted .txt file. The TXTRenderer component fails to sanitize file content and explicitly casts raw data as a ReactNode

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-fvhg-p4hf-79x3 MODERATE

@cyntler/react-doc-viewer's TXTRenderer fails to sanitize file content and explicitly casts raw data as a ReactNode

AFFECTED PACKAGES:

NPM / @cyntler/react-doc-viewer

<= 1.17.1

> HISTORIQUE DES MODIFICATIONS

Première apparition

20/05/2026 18:16

Source: NVD

Total des modifications: 0 Dernière mise à jour: 5 months ago

> REFERENCES

https://github.com/cyntler/react-doc-viewer/issues/317