Skip to content
OpenAdvisories

Package · npm

pannellum

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.3
    CVE-2026-27210

    Pannellum has a XSS vulnerability in hot spot attributes

    Pannellum is a lightweight, free, and open source panorama viewer for the web. In versions 3.5.0 through 2.5.6, the hot spot attributes configuration property allowed any attribute to be set, including HTML event handler attributes, allowing for potential XSS…

    mpetroff pannellum pannellum npm
  • Medium 4.8
    CVE-2019-16763

    XSS in Pannellum from 2.5.0 through 2.5.4

    In Pannellum from 2.5.0 through 2.5.4 URLs were not sanitized for data URIs (or vbscript:), allowing for potential XSS attacks. Such an attack would require a user to click on a hot spot to execute and would require an attacker-provided configuration. The mos…

    mpretroff pannellum pannellum npm