{"id":"CVE-2026-112290","revision":"35dba2855df146e28e2b3dc006ca0abc","records":[{"revision":"35dba2855df146e28e2b3dc006ca0abc","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-112290","aliases":[],"title":"MI6 @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 DOM XSS via ic-tree-item","description":"Intelligence Community UI Kit @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 contains a DOM-based cross-site scripting vulnerability in ic-tree-item that re-parses router-item slot text as HTML. When tree item truncation is enabled, attackers who influence a tree item label can have escaped markup decoded by truncateTreeItemLabel() and executed as JavaScript in visitors' browsers.","state":0,"publishedAt":"2026-10-19T13:55:32.741+00:00","modifiedAt":"2026-10-19T16:34:26.673+00:00","affected":[{"ecosystem":"https://www.npmjs.com","name":"Intelligence Community UI Kit canary web components","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"MI6\",\n                    \"product\": \"Intelligence Community UI Kit canary web components\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"3.0.0-canary.12\",\n                            \"lessThan\": \"3.0.0-canary.48\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"packageURL\": \"pkg:npm/%40ukic/canary-web-components\",\n                    \"collectionURL\": \"https://www.npmjs.com\",\n                    \"repo\": \"https://github.com/mi6/ic-ui-kit\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","score":2.3,"severity":"LOW"},{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","score":4.7,"severity":"MEDIUM"}],"references":["https://github.com/aaronamran/Public-Vulnerability-Disclosures/blob/main/2026/dom-xss-mi6-ic-ui-kit/README.md","https://github.com/mi6/ic-ui-kit/commit/e0eb0f16597dcb994a75c5230cd9243647ad7b3d","https://github.com/mi6/ic-ui-kit/blob/7b32c7c2b53b74a915f40984fb7b0a2d825fc49c/packages/canary-web-components/src/components/ic-tree-item/ic-tree-item.tsx","https://www.vulncheck.com/advisories/mi6-ukic-canary-web-components-3.0.0-canary.12-before-3.0.0-canary.48-dom-xss-via-ic-tree-item"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-112290","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-112290","identifiers":["CVE-2026-112290"]},"retained":false,"historicalAffected":[]}],"coverage":[]}