intelligence_community_ui_kit_canary_web_components vulnerabilities

CVEs whose affected-version data names the intelligence_community_ui_kit_canary_web_components package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112290Medium· 4.7

today

MI6 @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 DOM XSS via ic-tree-item

Intelligence Community UI Kit @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 contains a DOM-based cross-site scripting vulnerability in ic-tree-item that re-parses router-item slot text as HTML. When tree item truncat…

▾ SunlitMI6 · Intelligence Community UI Kit canary web componentsvia CVEORG