CVE-2026-66296 | lud oaskit 0.1.0/0.14.0 Error default.ex cross site scripting

A vulnerability labeled as problematic has been found in lud oaskit 0.1.0/0.14.0. Impacted is the function Oaskit.ErrorHandler.Default.format_reason/Oaskit.ErrorHandler.Default.reason_to_html of the file lib/oaskit/error_handler/default.ex of the component Error Handler. Executing a manipulation can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-66296. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.