XSS in Lud Oaskit

CVE-2026-66296

Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in lud oaskit allows reflected cross-site scripting via the default HTML error handler. Oaskit.ErrorHandler.Default.format_reason/4 and Oaskit.ErrorHandler.De…

Vulnerability class: XSS (Cross-Site Scripting)

Affected products

Lud Oaskit — versions 0.1.0, 552de8ca0ff60617bea58bcafa451892d61a161c

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related, vendor-advisory)
6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)
6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)
6b3ad84c-e1a6-4bf7-a703-f496b71e49db (patch)