CVE-2026-28445: Solidjs Unsanitized Innerhtml
Direct assignment of unsanitized component props or data to innerHTML can lead to Cross-Site Scripting (XSS). Ensure the input is sanitized utilizing a library like DOMPurify before rendering it as HTML.
Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0typescript
greprules fetch cve-2026-28445-solidjs-unsanitized-innerhtml --engine opengrepDescription
Direct assignment of unsanitized component props or data to innerHTML can lead to Cross-Site Scripting (XSS). Ensure the input is sanitized utilizing a library like DOMPurify before rendering it as HTML.
Detection target
Not provided
Recommended fix
Not provided
False-positive notes
Not provided
Community feedback
Sign in to report false positives, mark this rule useful, or suggest metadata improvements.