Vulnerabilities in lightpanda-io

2 results
CVE-2026-52842CRITICALLightpanda:URL parser misidentifies page origin for URLs containing @ in the path - Same-Origin Policy bypassEPSS 0.2%CVE-2026-52843CRITICALLightpanda: fetch() and XMLHttpRequest attach session cookies to cross-origin requests regardless of credentials modeEPSS 0.2%