Skip to content
OpenAdvisories

Vendor

amundsen-io

1 known vulnerabilities.

Products

amundsen-frontend 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-90772

    Amundsen Frontend through 4.3.0 Stored XSS via Description

    Amundsen frontend through 4.3.0 renders table, dashboard, and feature descriptions with dangerouslySetInnerHTML without HTML sanitization in ResourceListItem components. Attackers can inject malicious markup like img elements with onerror handlers into descri…

    amundsen-io amundsen-frontend