CVE-2026-41575

MEDIUM 6.1CVE-2026-41575 · Published 08/05/2026 · updated 17/06/2026

In short

CVE-2026-41575 is a MEDIUM (CVSS 6.1) vulnerability affecting w4nn4d13/ip (th30d4y).
Chance of exploitation in the next 30 days (EPSS): 0.18%, higher than 7.7% of all vulnerabilities.
Fix: update to 2.0.1 or later.

Package	Affected versions	Patched versions
w4nn4d13/ip th30d4y	`≥ 1.0.1, < 2.0.1`	`2.0.1`

Description

In th30d4y/IP from version 1.0.1 to before version 2.0.1, a DOM-Based Cross-Site Scripting (XSS) vulnerability was identified in an IP Reputation Checker application. Unsanitized user input was directly rendered in the browser, allowing attackers to execute arbitrary JavaScript. This issue has been patched in version 2.0.1.

References

th30d4y/IP security advisory · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free