Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via a crafted .txt file. The TXTRenderer component fails to sanitize file content and explicitly casts raw…

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-30691 · CVE overview and exploitation status

EUVD-2026-31207

GHSA-fvhg-p4hf-79x3

cve-program · CVE-2026-30691

• https://github.com/cyntler/react-doc-viewer/issues/317
• https://github.com/walidriouah/CVE-2026-30691

euvd · EUVD-2026-31207

• https://github.com/cyntler/react-doc-viewer/issues/317
• https://github.com/walidriouah/CVE-2026-30691

nvd · CVE-2026-30691

• https://github.com/cyntler/react-doc-viewer/issues/317
• https://github.com/walidriouah/CVE-2026-30691

osv · GHSA-fvhg-p4hf-79x3

• https://nvd.nist.gov/vuln/detail/CVE-2026-30691
• https://github.com/cyntler/react-doc-viewer/issues/317
• https://github.com/cyntler/react-doc-viewer
• https://github.com/walidriouah/CVE-2026-30691

No related changes are available here.