{"data":{"id":"791dd175-f074-46b3-838c-a189886fb95a","title":"GHSA-hqmv-v56g-4m47: Typebot.io has stored XSS via `javascript`: URI in text bubble links — bot author executes JS on visitors' browsers","summary":"The Typebot viewer (packages/embeds/js) renders anchor tags from rich text bubble content without filtering the javascript: URI scheme. A bot author who sets a link URL to javascript:PAYLOAD gets that script run in a visitor's browser when the link is clicked, and because the viewer is usually embedded in third-party sites, the script runs in the host page's origin and can read cookies and session tokens. The flaw is in PlateBlock.tsx line 32, with the same issue in ImageBubble.tsx line 102 for image link wrapping.","solution":"Proposed fix: filter javascript: URIs before rendering anchor tags, for example by replacing them with '#' using a safeUrl helper, or use a URL allowlist permitting only https:, http:, mailto: and tel:.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-hqmv-v56g-4m47","publishedAt":"2026-05-26T18:00:24.000Z","cveId":"CVE-2026-39964","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@typebot.io/js@< 0.10.1 (fixed: 0.10.1)"],"affectedPackageNames":["@typebot.io/js"],"affectedPackageRefs":["npm:@typebot.io/js"],"affectedVendors":[],"affectedVendorsRaw":["Typebot"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00334,"epssCheckedAt":"2026-10-14T12:12:41.724Z","kevDateAdded":null,"advisoryAliases":["GHSA-hqmv-v56g-4m47"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-26T18:00:24.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.7,"researchCategory":null,"atlasIds":null}}