Description
Pega Platform versions 7.2.1 to Infinity 24.2.1 are affected by an XSS issue with Mashup
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Pegasystems | Pega Infinity | 7.2.1 – < 24.2.2 | 24.2.2 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | brise | 20230603+git.5fdd2d6-3.1 | openSUSE-SU-2025:14722-1 |
| openSUSE Tumbleweed | rime-plum-go | 1.0.3-1.1 | openSUSE-SU-2025:14902-1 |
Advisories 2
- openSUSE-SU-2025:14722-1 rime-schema-all-20230603+git.5fdd2d6-3.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14902-1 rime-plum-1.0.3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026