matcha_sns vulnerabilities

CVEs whose affected-version data names the matcha_sns package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-27787Medium· 5.4

5mo ago

Cross-site scripting vulnerability exists in MATCHA SNS 1.3.9 and earlier

Cross-site scripting vulnerability exists in MATCHA SNS 1.3.9 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product.

▾ Sunliticz · matcha_snsEPSS 0.15%via NVD