Skip to content
OpenAdvisories

Product · jointakahe

takahe

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-91146

    Takahe through 0.11.0 Cross-Site Scripting via javascript: URL Scheme

    Takahe through 0.11.0 fails to restrict URL schemes in link hrefs within federated post content and profile summaries, allowing remote actors to inject javascript: links. Attackers can deliver federated content with malicious javascript: hrefs that execute in…

    jointakahe takahe