Detections
Analytics
CVE-2025-11687
medium
Description
A flaw was found in the gi-docgen. This vulnerability allows arbitrary JavaScript execution in the context of the page — enabling DOM access, session cookie theft and other client-side attacks — via a crafted URL that supplies a malicious value to the q GET parameter (reflected DOM XSS).
References
https://gitlab.gnome.org/GNOME/gi-docgen/-/issues/228