@progress/kendo-angular-conversational-ui vulnerabilities

CVEs whose affected-version data names the @progress/kendo-angular-conversational-ui package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-106135Medium· 5.4

2d ago

Cross-Site Scripting in Progress Software Kendo UI for Angular

Cross-Site Scripting (XSS) in the Chat component (@progress/kendo-angular-conversational-ui) in Progress Software Kendo UI for Angular versions prior to 25.3.0 allows a low-privileged attacker who can supply Chat messages to execute arbi…

▾ SunlitProgress Software · @progress/kendo-angular-conversational-uiEPSS 0.17%via CVEORG