Is there a public PoC exploit available for CVE-2026-32732?

Yes, a public proof-of-concept exploit is available for CVE-2026-32732. Prioritise patching immediately. EPSS: 0.0%.

Is there a patch available for CVE-2026-32732?

Yes, a patch is available for CVE-2026-32732. Update the affected software to the latest version immediately.

Vscode Lean4 CVE-2026-32732

EUVD-2026-12181

Basic XSS (CWE-80)

2026-03-13 GitHub_M

GHSA-6ggm-pwr9-r5h2

XSS Vscode Lean4

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

PoC Detected

Mar 16, 2026 - 14:53 vuln.today

Public exploit code

EUVD ID Assigned

Mar 13, 2026 - 22:01 euvd

EUVD-2026-12181

Analysis Generated

Mar 13, 2026 - 22:01 vuln.today

CVE Published

Mar 13, 2026 - 21:43 nvd

N/A

DescriptionCVE.org

Lean 4 VS Code Extension is a Visual Studio Code extension for the Lean 4 proof assistant. Projects that use @leanprover/unicode-input-component are vulnerable to an XSS exploit in 0.1.9 of the package and lower. The component re-inserted text in the input element back into the input element as unescaped HTML. The issue has been resolved in 0.2.0.

Analysis

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Vulnerability AssessmentAI

Risk Assessment	Attackers can steal session cookies, redirect users to malicious sites, deface content, or perform actions on behalf of authenticated users. Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker injects a JavaScript payload into a vulnerable input field. When another user views the page, the script executes in their browser, stealing their session token.
Remediation	Encode all user-supplied output contextually (HTML, JS, URL). … Detailed patch versions, workarounds, and compensating controls in full report.

Threat intelligence, references, and detailed analysis are available after sign-in.

CVE-2026-32732 vulnerability details – vuln.today

Back