CVE-2026-82642:详情

CVE-2026-82642

8.8
/
高危
2026-08-30
13h44 +00:00
Cross-site Scripting
A03-Injection
Network
2026-08-31
16h45 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

Readest: unsanitized iframe srcdoc attribute in the EPUB sanitizer can lead to arbitrary code execution

Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOMPurify using a configuration that forbade only the