Lack of data validation - Type confusion In thunderbird
Description
A flaw was found in Preact, a lightweight web development framework. A security regression allows an attacker to bypass JSON serialization protection, leading to HTML injection. This vulnerability arises when applications process unsanitized data from external sources, allowing malicious JSON to be interpreted as valid user interface elements. If exploited, this could enable arbitrary script execution, potentially compromising user data or system integrity.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel9 | - | - | |
rpm rhel9 | - | - | |
rpm rhel9 | - | - | |
 npm | 10.26.10, 10.27.3, 10.28.2 |
Aliases
1. 2. 3. 4. 5.
References
1.