Skip to content
OpenAdvisories

Vendor

live-codes

1 known vulnerabilities.

Products

livecodes 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-27701 Public exploit

    LiveCodes vulnerable to JavaScript Injection via untrusted PR title in i18n-update-pull workflow

    LiveCode is an open-source, client-side code playground. Prior to commit e151c64c2bd80d2d53ac1333f1df9429fe6a1a11, LiveCode's `i18n-update-pull` GitHub Actions workflow is vulnerable to JavaScript injection. The title of the Pull Request associated with the t…

    live-codes livecodes