CVE-2026-61526: Adonisjs Unescaped Error Html Response

Unescaped error message or validation field interpolated into an HTML HTTP response body, leading to potential Cross-Site Scripting (XSS).

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0TS
greprules fetch cve-2026-61526-adonisjs-unescaped-error-html-response --engine opengrep

Description

Unescaped error message or validation field interpolated into an HTML HTTP response body, leading to potential Cross-Site Scripting (XSS).