Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
altair-static
altair-static vulnerabilities (npm)
1 vulnerability.
altair-static
npm
Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox
CVE-2026-110802
Fix available
6.1
Medium
November 5, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open