Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Altair-graphql
Altair-express-middleware
Altair-graphql Altair-express-middleware vulnerabilities
Any severity
Critical
High or worse
Medium or worse
Low or worse
Any EPSS
EPSS 10% or more
EPSS 50% or more
EPSS 90% or more
Known exploited
In KEV
Public exploit
Fix available
Apply
altair-graphql
altair
,
altair-express-middleware
,
altair-fastify-plugin
+2 more
+4 more
Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox
CVE-2026-110802
Fix available
6.1
Medium
November 5, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open