Advisories · Technology

MI6 Intelligence Community UI Kit canary web components.

Every CVE that names MI6 Intelligence Community UI Kit canary web components among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-112290 CVE record

CVSS 2.3 Low

MI6 @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 DOM XSS via ic-tree-item
- MI6 Intelligence Community UI Kit canary web components
- Cross-site scripting (XSS)
Not analysed yet 19 Oct 2026