ui_icons vulnerabilities
CVEs whose affected-version data names the ui_icons package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-114527NoneUI Icons - Critical - Cross site scripting - SA-CONTRIB-2026-221
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Icons allows Cross-Site Scripting (XSS). This issue affects UI Icons versions: from 0.0.0 to 1.1.3, from 2.0.0 to 2.0.2.
▾ SunlitDrupal · UI IconsEPSS 0.16%via CVEORG
CVE-2026-114532NoneUI Icons - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-230
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Icons allows Cross-Site Scripting (XSS). This issue affects UI Icons versions: from 0.0.0 to 1.1.3, from 2.0.0 to 2.0.2.
▾ SunlitDrupal · UI IconsEPSS 0.16%via CVEORG