https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T23:59:27.320358+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-32732 CVE-2026-32732 — XSS in @leanprover/unicode-input-component 2026-10-07T23:59:27.337490+00:00

Affected: leanprover vscode-lean4

Lean 4 VS Code Extension is a Visual Studio Code extension for the Lean 4 proof assistant. Projects that use @leanprover/unicode-input-component are vulnerable to an XSS exploit in 0.1.9 of the package and lower. The component re-inserted text in the input element back into the input element as unescaped HTML. The issue has been resolved in 0.2.0.