THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-82642 (HIGH 8.8) — Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOMPurify using a configuration that forbade only the <script> tag (FORBID_TAGS: ['script']) in apps/readest-app/src/services/transformers/sanitizer.ts. DOMPu

[NVD] CVE-2026-82642 (HIGH 8.8) — Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOMPurify using a configuration that forbade only the <script> tag (FORBID_TAGS: ['script']) in apps/readest-app/src/services/transformers/sanitizer.ts. DOMPu

mednvdPublished 2026-08-30

CVE-2026-82642 CVSS: 8.8 HIGH Published: 2026-08-30T14:17:04.193

Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOMPurify using a configuration that forbade only the <script> tag (FORBID_TAGS: ['script']) in apps/readest-app/src/services/transformers/sanitizer.ts. DOMPurify does not parse the contents of the srcdoc attribu

Indicators of compromise

CVE-2026-82642cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-82642