video-bundle.js vulnerabilities

CVEs whose affected-version data names the video-bundle.js package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-82019Medium· 4.2PoC

TripleLift's ad rendering script (video-bundle.js) contains a DOM-based cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a publisher's domain by sending crafted postMessage paylo…

TripleLift's ad rendering script (video-bundle.js) contains a DOM-based cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a publisher's domain by sending crafted postMessage paylo…

▾ TwilightTripleLift · video-bundle.jsEPSS 0.22%via NVD

video-bundle.js vulnerabilities (CVEs) · VulnSea