Typebot has Stored XSS via Rating Block Custom Icon that Bypasses isUnsafe Sandbox in Builder Preview
High severity
GitHub Reviewed
Published
May 22, 2026
in
baptisteArno/typebot.io
•
Updated May 26, 2026
Give feedback on Dependabot alerts