Skip to content
OpenAdvisories

Vendor

TripleLift

1 known vulnerabilities.

Products

video-bundle.js 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.2
    CVE-2026-82019

    TripleLift video-bundle.js DOM-based XSS via postMessage

    TripleLift's ad rendering script (video-bundle.js) contains a DOM-based cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a publisher's domain by sending crafted postMessage payloads without origin val…

    TripleLift video-bundle.js