CVE-2026-65644: Rocketchat Unescaped Preview Html Injectioncve-2026-65644-rocketchat-unescaped-preview-html-injection
Unescaped user name concatenated into HTML message preview allows HTML injection and stored XSS (CVE-2026-65644).
Explore
Rule Explorer
Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.
- Public rules
- 4797
- Downloads
- 12M
- Verified
- 4797
- Authors
- 2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
All matching rules loaded.