Skip to content
OpenAdvisories

Vendor

GitHubNewbie0

1 known vulnerabilities.

Products

odf-kit 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-113787

    odf-kit: HTML injection leading to XSS in odtToHtml() via unescaped style attribute values

    odf-kit allows users to generate, fill, read, and convert OpenDocument Format files (.odt, .ods) in TypeScript and JavaScript. Starting in version 0.6.0 and prior to version 0.14.2, he renderer has an `escapeHtml()` helper and applies it consistently to text …

    GitHubNewbie0 odf-kit odf-kit npm