LY Corporation LIFF SDK

• CVE-2026-112148 Medium 5.1 A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting (XSS) flaw allows an attacker to execute arbitrary JavaScript in the origin of an 0.4%