CVE-2026-39040

Status: Received

Description

BharatMLStack up to and including 1.3.0 is vulnerable to Cross Site Scripting (XSS) via the component Trufflebox UI (trufflebox-ui) in ExpressionViewModal.jsx.

Published

September 15, 2026 6:17 PM

Last Modified

September 15, 2026 6:17 PM

Source

[email protected]

References

https://github.com/Meesho/BharatMLStack
https://github.com/wincr4ck/security-advisories/blob/main/bharatmlstack-cve-writeup.md

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Call or email us to get started.

+91-9229434143 [email protected]