https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-13T14:47:19.759449+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-124690 CVE-2026-124690 — Cross-Site Scripting During Kendo UI for jQuery Custom SVG Icon Sanitization 2026-11-13T14:47:19.760799+00:00

Affected: Progress Software Kendo UI for jQuery

In Progress Kendo UI for jQuery, sanitizeSvgContent() parses custom icon markup into a live DOM before filtering it. An attacker who can influence custom icon content can cause JavaScript to execute during icon creation, before an unsafe element is removed. The issue was reported in version 2026.3.1015; the first affected release has not been established. The issue is fixed in version 2026.4.1110.