Skip to content
OpenAdvisories

Vendor

io.qameta.allure

1 known vulnerabilities.

Products

allure-generator 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-55847

    Allure: Stored XSS via unescaped ANSI helper in Allure report status message/trace rendering

    Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the ansi.js helper at allure-generator/src/main/javascript/helpers/ansi.js passes attacker-influenced statusMessage and statusTrace values through Ansi…

    allure-framework io.qameta.allure allure2 allure-generator Ubuntu Maven