Advisories · Technology

altair.

Every CVE that names altair among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-110802 CVE record

CVSS 6.1 Medium

Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox
- altair
- altair-graphql altair-express-middleware
- Cross-site scripting (XSS)
- CWE-829
Not analysed yet 5 Nov 2026
CVE-2024-54147 CVE record

CVSS 6.8 Medium

Altair GraphQL Client's desktop app does not validate HTTPS certificates
- altair
- Weak cryptography or TLS
Not analysed yet 9 Dec 2024
CVE-2023-43799 CVE record

CVSS 5.0 Medium

The Altair Desktop Client Does Not Sanitize External URLs before passing them to the underlying system
- altair
- CWE-20
Not analysed yet 4 Oct 2023