From adfb5d21fe33556fe576e672caee8d2b47d280de Mon Sep 17 00:00:00 2001 From: Stalin <161853795+Stalin-143@users.noreply.github.com> Date: Fri, 1 May 2026 22:16:20 +0530 Subject: [PATCH] Create CVE-2026-41575.md --- patches/CVE-2026-41575.md | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 patches/CVE-2026-41575.md diff --git a/patches/CVE-2026-41575.md b/patches/CVE-2026-41575.md new file mode 100644 index 0000000..41b99de --- /dev/null +++ b/patches/CVE-2026-41575.md @@ -0,0 +1,28 @@ +![CVE](https://img.shields.io/badge/CVE-2026--41575-red) + +# CVE-2026-41575 — DOM-Based XSS (IP Reputation Checker) + +**Severity:** Moderate +**CWE:** CWE-80, CWE-85 + +## Summary +A DOM-based XSS vulnerability allows execution of arbitrary JavaScript due to unsanitized user input. + +## Impact +- Session hijacking +- Credential theft +- Client-side compromise + +## Affected +1.0.1 + +## Fixed +2.0.1 + +## References +- https://github.com/advisories/GHSA-j7wv-7j97-9qh9 + +## Credits +Reporter: krraze +Coordinator: Stalin-143 +Coordinator: harriiinnii