CVE-2026-65538

Machete versions up to 5.2 are vulnerable to a Cross Site Scripting (XSS) flaw that could allow attackers to inject malicious scripts into web pages viewed by users, potentially leading to data theft or session hijacking. Organizations using affected versions should prioritize remediation to mitigate the risk of exploitation, particularly those with web-facing applications or user-generated content.