clevertap-web-sdk vulnerabilities (npm)

2 vulnerabilities.

• clevertap-web-sdk npm CleverTap Web SDK is vulnerable to DOM-based Cross-Site Scripting (XSS) via window.postMessage CVE-2026-26862 Fix available 8.3 HighFebruary 27, 2026
• clevertap-web-sdk npm CleverTap Web SDK is vulnerable to DOM-based XSS via handleCustomHtmlPreviewPostMessageEvent function CVE-2026-26861 Fix available 8.3 HighFebruary 27, 2026