Skip to content
OpenAdvisories

Vendor

flyfish-dev

1 known vulnerabilities.

Products

file-viewer 1 msdoc-viewer 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-91127

    File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer

    File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and internal web applications. Prior to @file-viewer/doc 2.3.1 and msdoc-viewer 0.2.2, the legacy DOC renderer emitted document-controlled hyperlink targets into …

    flyfish-dev @file-viewer msdoc-viewer file-viewer npm