altair-graphql altair

• CVE-2026-110802 Medium 6.1 Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox 0.2%
• CVE-2024-54147 Medium 6.8 Altair GraphQL Client's desktop app does not validate HTTPS certificates 0.2%
• CVE-2023-43799 Medium 5.0 The Altair Desktop Client Does Not Sanitize External URLs before passing them to the underlying system 0.2%