LOW 2.4 NVD

CVE-2026-77166

The emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and line breaks, the sidebar layout becomes brok

The emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and line breaks, the sidebar layout becomes broken and can hide other items.

References

https://hackerone.com/reports/3599470

Published: 2026-09-21 · Source: NVD · Feed updated: 2026-09-21

This low severity vulnerability with a CVSS score of 2.4 was published on 2026-09-21 via NVD.

vulnfeed aggregates 14604 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.