What is GHSA-xfmw-9xm9-7q4j?

GHSA-xfmw-9xm9-7q4j is a security advisory published by GitHub Security Advisories with Critical severity. Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. ...

Which CVE IDs does GHSA-xfmw-9xm9-7q4j cover?

GHSA-xfmw-9xm9-7q4j covers the following CVE IDs: CVE-2026-82090. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-xfmw-9xm9-7q4jCritical

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. ...

Vendor

GitHub Security Advisories

Published

August 28, 2026

Last Modified

August 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-82090 →

📋 Description

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bridge methods.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-82090
https://github.com/FUNFACTOR1/pocket-android-xss-0click-cve
https://github.com/advisories/GHSA-xfmw-9xm9-7q4j