getpocket Pocket

• CVE-2026-82090 Critical 9.2 Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM.  JavaScript code can alter the application state via native bridge methods. 0.4%