Vulnerabilidades de Progress Software Kendo UI for Angular (CVE)

Registros CVE publicados para Progress Software Kendo UI for Angular, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

4 resultados
4.1Media
CVE-2026-106144

Prototype Pollution in Progress Software Kendo UI for Angular

Progress Software Kendo UI for Angular

Prototype Pollution in the Scheduler component (@progress/kendo-angular-scheduler and @progress/kendo-angular-common) in Progress Software Kendo UI for Angular versions prior to 25.1.0 allows a high-privileged attacker who can control a field path processed b…

5.4Media
CVE-2026-106141

Cross-Site Scripting in Progress Software Kendo UI for Angular

Progress Software Kendo UI for Angular

Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-angular-editor) in Progress Software Kendo UI for Angular versions prior to 25.3.0 allows a low-privileged attacker who can supply Editor content to execute arbitrary JavaScript in another us…

5.4Media
CVE-2026-106135

Cross-Site Scripting in Progress Software Kendo UI for Angular

Progress Software Kendo UI for Angular

Cross-Site Scripting (XSS) in the Chat component (@progress/kendo-angular-conversational-ui) in Progress Software Kendo UI for Angular versions prior to 25.3.0 allows a low-privileged attacker who can supply Chat messages to execute arbitrary JavaScript in an…

5.4Media
CVE-2025-6725

Cross-Site Scripting (XSS) in PdfViewer

Progress Software Kendo UI for jQuery; Progress Software Kendo UI for Angular; Progress Software KendoReact; Progress Software Telerik UI for ASP.NET MVC

In the PdfViewer component, a Cross-Site Scripting (XSS) vulnerability is possible if a specially-crafted document has already been loaded and the user engages with a tool that requires the DOM to be re-rendered.