hackage-server vulnerabilities (Hackage)

3 vulnerabilities.

• hackage-server Hackage Hackage package metadata stored XSS vulnerability CVE-2026-40472 9.9 CriticalMarch 28, 2026
• hackage-server Hackage Hackage CSRF vulnerability CVE-2026-40471 9.6 CriticalMarch 28, 2026
• hackage-server Hackage Hackage package and doc upload stored XSS vulnerability CVE-2026-40470 Fix available 9.9 CriticalJanuary 16, 2026