Advisories · Technology

altair-graphql altair-static.

Every CVE that names altair-graphql altair-static among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-110802 CVE record

CVSS 6.1 Medium

Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox
- altair
- altair-graphql altair-express-middleware
- Cross-site scripting (XSS)
- CWE-829
Not analysed yet 5 Nov 2026