amundsen-frontend vulnerabilities

CVEs whose affected-version data names the amundsen-frontend package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-90772High· 7.6PoC

1w ago

Amundsen frontend through 4.3.0 renders table, dashboard, and feature descriptions with dangerouslySetInnerHTML without HTML sanitization in ResourceListItem components

Amundsen frontend through 4.3.0 renders table, dashboard, and feature descriptions with dangerouslySetInnerHTML without HTML sanitization in ResourceListItem components. Attackers can inject malicious markup like img elements with onerro…

▾ Midnightamundsen-io · amundsen-frontendEPSS 0.21%via NVD