@progress/kendo-react-layout vulnerabilities

CVEs whose affected-version data names the @progress/kendo-react-layout package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-106134Medium· 5.4

2d ago

Cross-Site Scripting in Progress Software KendoReact

Cross-Site Scripting (XSS) in the Menu component (@progress/kendo-react-layout) in Progress Software KendoReact versions 1.3.0 through 16.1.0 allows a low-privileged attacker who can influence the Menu item data to execute arbitrary Java…

▾ SunlitProgress Software · @progress/kendo-react-layoutEPSS 0.17%via CVEORG