Cevnitra
Cevnitra

Explore Cevnitra

Explore Cevnitra

Find the risk.
Focus the fix.

Bring your applications and infrastructure into focus.

Scan Now
Already have an account? Log in
All security reports
NVD security advisoryHigh

High advisory for A Cross-Site Scripting (XSS) (CWE-79) vu

CVE-2026-85268 · Reported 30 Oct 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

A Cross-Site Scripting (XSS) (CWE-79) vuJavaScript ecosystem

Advisory overview

A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase Authentication versions prior to 2026-08-14 on iOS allows an unauthenticated remote attacker to execute arbitrary JavaScript using a malicious iOS bundle ID.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account