CVE-2026-82642
- Source
- https://cve.org/CVERecord?id=CVE-2026-82642
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82642.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-82642
- Aliases
-
- GHSA-p4x7-pf2c-xrvj
- Published
- 2026-08-30T13:44:34Z
- Modified
- 2026-10-28T02:31:06Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Readest: unsanitized iframe srcdoc attribute in the EPUB sanitizer can lead to arbitrary code execution
- Details
-
Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOMPurify using a configuration that forbade only the
- Database specific
{ "cna_assigner": "JFROG", "cwe_ids": [ "CWE-79" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82642.json" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82642.json
- https://github.com/readest/readest/releases/tag/v0.11.16
- https://github.com/readest/readest/security/advisories/GHSA-p4x7-pf2c-xrvj
- https://nvd.nist.gov/vuln/detail/CVE-2026-82642
- https://github.com/readest/readest/commit/005aa2d6157a34049bf45641c06861d606a85edb
- https://github.com/readest/readest/pull/4762
- https://github.com/readest/readest
Affected packages
Git / github.com/readest/readest
Affected ranges
- Type
- GIT
- Repo
- https://github.com/readest/readest
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "0" }, { "fixed": "0.11.16" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "fixed": "005aa2d6157a34049bf45641c06861d606a85edb" } ], "source": "REFERENCES_COMMIT" }, { "original_tag": "v0.11.16", "range": [ { "fixed": "5358d85c0ba89bc440a5b9469b9932fcc69e318c" } ], "source": "REFERENCES_TAG" } ] }
Affected versions
v0.*
v0.10.1
v0.10.2
v0.10.4
v0.10.6
v0.11.1
v0.11.10
v0.11.12
v0.11.2
v0.11.4
v0.8.3
v0.8.5
v0.8.6
v0.8.7
v0.8.9
v0.9.10
v0.9.100
v0.9.101
v0.9.11
v0.9.13
v0.9.15
v0.9.17
v0.9.18
v0.9.19
v0.9.2
v0.9.20
v0.9.21
v0.9.22
v0.9.23
v0.9.25
v0.9.26
v0.9.27
v0.9.28
v0.9.29
v0.9.3
v0.9.30
v0.9.31
v0.9.32
v0.9.33
v0.9.35
v0.9.36
v0.9.37
v0.9.38
v0.9.39
v0.9.40
v0.9.41
v0.9.43
v0.9.49
v0.9.5
v0.9.50
v0.9.51
v0.9.52
v0.9.53
v0.9.55
v0.9.56
v0.9.57
v0.9.58
v0.9.59
v0.9.6
v0.9.60
v0.9.61
v0.9.62
v0.9.63
v0.9.64
v0.9.65
v0.9.66
v0.9.67
v0.9.68
v0.9.69
v0.9.7
v0.9.71
v0.9.72
v0.9.75
v0.9.76
v0.9.78
v0.9.80
v0.9.81
v0.9.82
v0.9.85
v0.9.86
v0.9.87
v0.9.88
v0.9.9
v0.9.90
v0.9.91
v0.9.92
v0.9.93
v0.9.94
v0.9.95
v0.9.96
v0.9.97
v0.9.98
v0.9.99