Vulnerabilities in altair-graphql
3 resultsCVE-2026-110802MEDIUMAltair: DOM-based XSS via attacker-controlled script URLs in the iframe sandboxEPSS 0.2%CVE-2023-43799MEDIUMThe Altair Desktop Client Does Not Sanitize External URLs before passing them to the underlying systemEPSS 0.2%CVE-2024-54147MEDIUMAltair GraphQL Client's desktop app does not validate HTTPS certificatesEPSS 0.2%