altair-graphql
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| altair | 3 | – | Nov 5, 2026 |
| altair-express-middleware | 1 | – | Nov 5, 2026 |
| altair-fastify-plugin | 1 | – | Nov 5, 2026 |
| altair-koa-middleware | 1 | – | Nov 5, 2026 |
| altair-static | 1 | – | Nov 5, 2026 |
Exploited and recent CVEs
- CVE-2026-110802 Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox 0.2%
- CVE-2026-110802 Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox 0.2%
- CVE-2026-110802 Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox 0.2%
- CVE-2026-110802 Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox 0.2%
- CVE-2026-110802 Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox 0.2%
- CVE-2024-54147 Altair GraphQL Client's desktop app does not validate HTTPS certificates 0.2%
- CVE-2023-43799 The Altair Desktop Client Does Not Sanitize External URLs before passing them to the underlying system 0.2%