What’s Vulnerable › Products

Openjsf Marko/Runtime-Tags vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Openjsf Marko/Runtime-Tags version is affected

Latest Openjsf Marko/Runtime-Tags vulnerabilities

• CVE-2026-41591 — Marko: XSS via case-insensitive script/style closing tag bypass in runtime HTML escaping (CVSS 6.4)