CVE-2026-90931Published
LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Upload
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-90931 · Microsoft / collected KEV context
cve-program · CVE-2026-90931
Related operational evidence
Explicit CVE identifiers- LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Upload · Affected-version evidence changed · 29 Oct 2026