High
TypeBot vulnerable to cross-typebot webhook resume via unchecked `resultId` lineage allows unauthorized control of another bot's waiting session
Type: advisorySources: OSV
TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a different typebot by mixing an authorized `typebotId` and `blockId` and a foreign live `resultId`. The webhook resume handler authorizes the parent typebot first, but then resolves the descendant `result` only by `resultId`. As a result, an attacker can inject arbitrary webhook JSON into another typebot's suspended session and advance its execution without any access to the victim typebot. Version 3.17.0 patches the issue.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-47704
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 2 Nov 2026, 20:11 UTC · Revision 1
Source evidence
TypeBot vulnerable to cross-typebot webhook resume via unchecked `resultId` lineage allows unauthorized control of another bot's waiting session
core-osv · Original sourcePublished 11 Aug 2026, 16:23 UTC
TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a different typebot by mixing an authorized `typebotId` and `blockId` and a foreign live `resultId`. The webhook resume handler authorizes the parent typebot first, but then resolves the descendant `result` only by `resultId`. As a result, an attacker can inject arbitrary webhook JSON into another typebot's suspended session and advance its execution without any access to the victim typebot. Version 3.17.0 patches the issue.
osv:CVE-2026-47704
Complete source record
{
"id": "706139b2daf2e4a3575eb523332f50cbeef8564c3467150117c98b5666fcf32c",
"url": "https://osv.dev/vulnerability/CVE-2026-47704",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "TypeBot vulnerable to cross-typebot webhook resume via unchecked `resultId` lineage allows unauthorized control of another bot's waiting session",
"summary": "TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a different typebot by mixing an authorized `typebotId` and `blockId` and a foreign live `resultId`. The webhook resume handler authorizes the parent typebot first, but then resolves the descendant `result` only by `resultId`. As a result, an attacker can inject arbitrary webhook JSON into another typebot's suspended session and advance its execution without any access to the victim typebot. Version 3.17.0 patches the issue.",
"evidence": "osv:CVE-2026-47704",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2026-47704",
"aliases": [
"CVE-2026-47704",
"GHSA-h67g-6q6g-58cj"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/baptistearno/typebot.io",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "31c360a342e40d1423e5421c046e8f821b1154c4"
},
{
"fixed": "6f915c3096bd43d4a913f0f2c7a92e8463f81a86"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "0"
},
{
"fixed": "3.17.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"fixed": "6f915c3096bd43d4a913f0f2c7a92e8463f81a86"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "31c360a342e40d1423e5421c046e8f821b1154c4"
}
],
"source": "REFERENCES_TAG",
"original_tag": "v3.17.0"
}
]
}
}
],
"versions": [
"react-v0.10.2",
"js-v0.10.2",
"v3.16.1",
"v3.16.0",
"react-v0.10.1",
"js-v0.10.1",
"react-v0.10.0",
"js-v0.10.0",
"react-v0.9.24",
"js-v0.9.24",
"react-v0.9.23",
"js-v0.9.23",
"react-v0.9.22",
"js-v0.9.22",
"react-v0.9.21",
"js-v0.9.21",
"react-v0.9.20",
"js-v0.9.20",
"react-v0.9.19",
"js-v0.9.19",
"v3.15.2",
"latest",
"v3.15.1",
"v3.15.0",
"react-v0.9.18",
"js-v0.9.18",
"v3.14.2",
"v3.14.1",
"v3.14.0",
"react-v0.9.17",
"js-v0.9.17",
"react-v0.9.16",
"js-v0.9.16",
"next",
"v3.13.2",
"react-v0.9.15",
"js-v0.9.15",
"react-v0.9.14",
"js-v0.9.14",
"react-v0.9.13",
"js-v0.9.13",
"react-v0.9.12",
"js-v0.9.12",
"react-v0.9.11",
"js-v0.9.11",
"react-v0.9.10",
"js-v0.9.10",
"react-v0.9.9",
"js-v0.9.9",
"react-v0.9.8",
"js-v0.9.8",
"react-v0.9.7",
"js-v0.9.7",
"v3.13.1",
"v3.13.0",
"react-v0.9.6",
"js-v0.9.6",
"react-v0.9.5",
"js-v0.9.5",
"react-v0.9.4",
"js-v0.9.4",
"v3.12.0",
"react-v0.9.3",
"js-v0.9.3",
"react-v0.9.2",
"js-v0.9.2",
"react-v0.9.1",
"js-v0.9.1",
"react-v0.9.0",
"js-v0.9.0",
"react-v0.8.24",
"js-v0.8.24",
"react-v0.8.23",
"js-v0.8.23",
"react-v0.8.22",
"js-v0.8.22",
"react-v0.8.21",
"js-v0.8.21",
"v3.11.0",
"react-v0.8.20",
"js-v0.8.20",
"react-v0.8.19",
"js-v0.8.19",
"react-v0.8.18",
"js-v0.8.18",
"react-v0.8.17",
"js-v0.8.17",
"react-v0.8.16",
"js-v0.8.16",
"v3.10.0",
"react-v0.8.15",
"js-v0.8.15",
"react-v0.8.14",
"js-v0.8.14",
"v3.9.0",
"react-v0.8.13",
"js-v0.8.13",
"react-v0.8.12",
"js-v0.8.12",
"react-v0.8.11",
"js-v0.8.11",
"react-v0.8.10",
"js-v0.8.10",
"react-v0.8.9",
"js-v0.8.9",
"react-v0.8.8",
"js-v0.8.8",
"react-v0.8.7",
"js-v0.8.7",
"react-v0.8.6",
"js-v0.8.6",
"react-v0.8.5",
"js-v0.8.5",
"react-v0.8.4",
"js-v0.8.4",
"react-v0.8.3",
"js-v0.8.3",
"react-v0.8.2",
"js-v0.8.2",
"v3.8.0",
"react-v0.8.1",
"js-v0.8.1",
"react-v0.8.0",
"js-v0.8.0",
"react-v0.7.4",
"js-v0.7.4",
"react-v0.7.3",
"js-v0.7.3",
"react-v0.7.2",
"js-v0.7.2",
"react-v0.7.1",
"js-v0.7.1",
"react-v0.7.0",
"js-v0.7.0",
"react-v0.6.0",
"nextjs-v0.6.0",
"js-v0.6.0",
"react-v0.5.0",
"nextjs-v0.5.0",
"js-v0.5.0",
"react-v0.4.0",
"nextjs-v0.4.0",
"js-v0.4.0",
"react-v0.3.92",
"nextjs-v0.3.92",
"js-v0.3.92",
"react-v0.3.91",
"nextjs-v0.3.91",
"js-v0.3.91",
"react-v0.3.90",
"nextjs-v0.3.90",
"js-v0.3.90",
"react-v0.3.89",
"nextjs-v0.3.89",
"js-v0.3.89",
"react-v0.3.88",
"nextjs-v0.3.88",
"js-v0.3.88",
"react-v0.3.87",
"nextjs-v0.3.87",
"js-v0.3.87",
"v3.7.1",
"v3.7.0",
"react-v0.3.86",
"nextjs-v0.3.86",
"js-v0.3.86",
"react-v0.3.85",
"nextjs-v0.3.85",
"js-v0.3.85",
"react-v0.3.84",
"nextjs-v0.3.84",
"js-v0.3.84",
"react-v0.3.83",
"nextjs-v0.3.83",
"js-v0.3.83",
"react-v0.3.82",
"nextjs-v0.3.82",
"js-v0.3.82",
"react-v0.3.81",
"nextjs-v0.3.81",
"js-v0.3.81",
"react-v0.3.80",
"nextjs-v0.3.80",
"js-v0.3.80",
"react-v0.3.79",
"nextjs-v0.3.79",
"js-v0.3.79",
"v3.6.0",
"react-v0.3.78",
"nextjs-v0.3.78",
"js-v0.3.78",
"react-v0.3.77",
"nextjs-v0.3.77",
"js-v0.3.77",
"react-v0.3.76",
"nextjs-v0.3.76",
"js-v0.3.76",
"react-v0.3.75",
"nextjs-v0.3.75",
"js-v0.3.75",
"react-v0.3.74",
"nextjs-v0.3.74",
"js-v0.3.74",
"react-v0.3.73",
"nextjs-v0.3.73",
"js-v0.3.73",
"react-v0.3.72",
"nextjs-v0.3.72",
"js-v0.3.72",
"react-v0.3.71",
"nextjs-v0.3.71",
"js-v0.3.71",
"react-v0.3.70",
"nextjs-v0.3.70",
"js-v0.3.70",
"react-v0.3.69",
"nextjs-v0.3.69",
"js-v0.3.69",
"react-v0.3.67",
"nextjs-v0.3.67",
"js-v0.3.67",
"react-v0.3.66",
"nextjs-v0.3.66",
"js-v0.3.66",
"react-v0.3.65",
"nextjs-v0.3.65",
"js-v0.3.65",
"react-v0.3.64",
"nextjs-v0.3.64",
"js-v0.3.64",
"react-v0.3.63",
"nextjs-v0.3.63",
"js-v0.3.63",
"react-v0.3.62",
"nextjs-v0.3.62",
"js-v0.3.62",
"react-v0.3.61",
"nextjs-v0.3.61",
"js-v0.3.61",
"react-v0.3.60",
"nextjs-v0.3.60",
"js-v0.3.60",
"v3.5.0",
"react-v0.3.59",
"nextjs-v0.3.59",
"js-v0.3.59",
"react-v0.3.58",
"nextjs-v0.3.58",
"js-v0.3.58",
"react-v0.3.57",
"nextjs-v0.3.57",
"js-v0.3.57",
"react-v0.3.56",
"nextjs-v0.3.56",
"js-v0.3.56",
"react-v0.3.55",
"nextjs-v0.3.55",
"js-v0.3.55",
"react-v0.3.54",
"nextjs-v0.3.54",
"js-v0.3.54",
"react-v0.3.53",
"nextjs-v0.3.53",
"js-v0.3.53",
"react-v0.3.52",
"nextjs-v0.3.52",
"js-v0.3.52",
"react-v0.3.51",
"nextjs-v0.3.51",
"js-v0.3.51",
"react-v0.3.50",
"nextjs-v0.3.50",
"js-v0.3.50",
"react-v0.3.49",
"nextjs-v0.3.49",
"js-v0.3.49",
"react-v0.3.48",
"nextjs-v0.3.48",
"js-v0.3.48",
"v3.4.2",
"v3.4.1",
"v3.4.0",
"react-v0.3.47",
"nextjs-v0.3.47",
"js-v0.3.47",
"react-v0.3.46",
"nextjs-v0.3.46",
"js-v0.3.46",
"react-v0.3.45",
"nextjs-v0.3.45",
"js-v0.3.45",
"react-v0.3.44",
"nextjs-v0.3.44",
"js-v0.3.44",
"react-v0.3.43",
"nextjs-v0.3.43",
"js-v0.3.43",
"react-v0.3.42",
"nextjs-v0.3.42",
"js-v0.3.42",
"react-v0.3.41",
"nextjs-v0.3.41",
"js-v0.3.41",
"react-v0.3.40",
"nextjs-v0.3.40",
"js-v0.3.40",
"react-v0.3.38",
"nextjs-v0.3.38",
"js-v0.3.38",
"v3.3.0",
"react-v0.3.37",
"nextjs-v0.3.37",
"js-v0.3.37",
"react-v0.3.36",
"nextjs-v0.3.36",
"js-v0.3.36",
"react-v0.3.35",
"nextjs-v0.3.35",
"js-v0.3.35",
"v3.2.0",
"react-v0.3.34",
"nextjs-v0.3.34",
"js-v0.3.34",
"react-v0.3.33",
"nextjs-v0.3.33",
"js-v0.3.33",
"react-v0.3.32",
"nextjs-v0.3.32",
"js-v0.3.32",
"react-v0.3.31",
"nextjs-v0.3.31",
"js-v0.3.31",
"react-v0.3.30",
"nextjs-v0.3.30",
"js-v0.3.30",
"v3.1.2",
"react-v0.3.29",
"nextjs-v0.3.29",
"js-v0.3.29",
"react-v0.3.28",
"nextjs-v0.3.28",
"js-v0.3.28",
"v3.1.1",
"v3.1.0",
"react-v0.3.27",
"nextjs-v0.3.27",
"js-v0.3.27",
"react-v0.3.26",
"nextjs-v0.3.26",
"js-v0.3.26",
"react-v0.3.25",
"nextjs-v0.3.25",
"js-v0.3.25",
"react-v0.3.24",
"nextjs-v0.3.24",
"js-v0.3.24",
"react-v0.3.23",
"nextjs-v0.3.23",
"js-v0.3.23",
"react-v0.3.22",
"nextjs-v0.3.22",
"js-v0.3.22",
"react-v0.3.21",
"nextjs-v0.3.21",
"js-v0.3.21",
"react-v0.3.20",
"nextjs-v0.3.20",
"js-v0.3.20",
"react-v0.3.19",
"nextjs-v0.3.19",
"js-v0.3.19",
"react-v0.3.18",
"nextjs-v0.3.18",
"js-v0.3.18",
"v3.0.1",
"v3.0.0",
"react-v0.3.17",
"nextjs-v0.3.17",
"js-v0.3.17",
"react-v0.3.16",
"nextjs-v0.3.16",
"js-v0.3.16",
"react-v0.3.15",
"nextjs-v0.3.15",
"js-v0.3.15",
"react-v0.3.14",
"nextjs-v0.3.14",
"js-v0.3.14",
"react-v0.3.13",
"nextjs-v0.3.13",
"js-v0.3.13",
"v2.28.2",
"v2.28.1",
"v2.28.0",
"react-v0.3.12",
"nextjs-v0.3.12",
"js-v0.3.12",
"react-v0.3.11",
"nextjs-v0.3.11",
"js-v0.3.11",
"react-v0.3.10",
"nextjs-v0.3.10",
"js-v0.3.10",
"react-v0.3.9",
"nextjs-v0.3.9",
"js-v0.3.9",
"react-v0.3.8",
"nextjs-v0.3.8",
"js-v0.3.8",
"react-v0.3.7",
"nextjs-v0.3.7",
"js-v0.3.7",
"react-v0.3.6",
"nextjs-v0.3.6",
"js-v0.3.6",
"react-v0.3.5",
"nextjs-v0.3.5",
"js-v0.3.5",
"v2.27.0",
"react-v0.3.4",
"nextjs-v0.3.4",
"js-v0.3.4",
"react-v0.3.3",
"nextjs-v0.3.3",
"js-v0.3.3",
"react-v0.3.2",
"nextjs-v0.3.2",
"js-v0.3.2",
"react-v0.3.1",
"nextjs-v0.3.1",
"js-v0.3.1",
"react-v0.3.0",
"nextjs-v0.3.0",
"js-v0.3.0",
"react-v0.2.92",
"nextjs-v0.2.92",
"js-v0.2.92",
"react-v0.2.91",
"nextjs-v0.2.91",
"js-v0.2.91",
"react-v0.2.90",
"nextjs-v0.2.90",
"js-v0.2.90",
"react-v0.2.89",
"nextjs-v0.2.89",
"js-v0.2.89",
"react-v0.2.88",
"nextjs-v0.2.88",
"js-v0.2.88",
"react-v0.2.87",
"nextjs-v0.2.87",
"js-v0.2.87",
"react-v0.2.86",
"nextjs-v0.2.86",
"js-v0.2.86",
"v2.26.1",
"v2.26.0",
"react-v0.2.85",
"nextjs-v0.2.85",
"js-v0.2.85",
"react-v0.2.84",
"nextjs-v0.2.84",
"js-v0.2.84",
"v2.25.2",
"react-v0.2.83",
"nextjs-v0.2.83",
"js-v0.2.83",
"react-v0.2.82",
"nextjs-v0.2.82",
"js-v0.2.82",
"v2.25.1",
"v2.25.0",
"react-v0.2.81",
"nextjs-v0.2.81",
"js-v0.2.81",
"react-v0.2.80",
"nextjs-v0.2.80",
"js-v0.2.80",
"react-v0.2.79",
"nextjs-v0.2.79",
"js-v0.2.79",
"react-v0.2.78",
"nextjs-v0.2.78",
"js-v0.2.78",
"react-v0.2.77",
"nextjs-v0.2.77",
"js-v0.2.77",
"react-v0.2.76",
"nextjs-v0.2.76",
"js-v0.2.76",
"react-v0.2.75",
"nextjs-v0.2.75",
"js-v0.2.75",
"react-v0.2.74",
"nextjs-v0.2.74",
"js-v0.2.74",
"react-v0.2.73",
"nextjs-v0.2.73",
"js-v0.2.73",
"react-v0.2.72",
"nextjs-v0.2.72",
"js-v0.2.72",
"react-v0.2.71",
"nextjs-v0.2.71",
"js-v0.2.71",
"react-v0.2.70",
"nextjs-v0.2.70",
"js-v0.2.70",
"react-v0.2.69",
"nextjs-v0.2.69",
"js-v0.2.69",
"react-v0.2.68",
"nextjs-v0.2.68",
"js-v0.2.68",
"react-v0.2.67",
"nextjs-v0.2.67",
"js-v0.2.67",
"react-v0.2.66",
"nextjs-v0.2.66",
"js-v0.2.66",
"react-v0.2.65",
"nextjs-v0.2.65",
"js-v0.2.65",
"react-v0.2.64",
"nextjs-v0.2.64",
"js-v0.2.64",
"react-v0.2.63",
"nextjs-v0.2.63",
"js-v0.2.63",
"react-v0.2.62",
"nextjs-v0.2.62",
"js-v0.2.62",
"react-v0.2.61",
"nextjs-v0.2.61",
"js-v0.2.61",
"v2.24.1",
"v2.24.0",
"react-v0.2.60",
"nextjs-v0.2.60",
"js-v0.2.60",
"react-v0.2.59",
"nextjs-v0.2.59",
"js-v0.2.59",
"react-v0.2.58",
"nextjs-v0.2.58",
"js-v0.2.58",
"react-v0.2.57",
"nextjs-v0.2.57",
"js-v0.2.57",
"react-v0.2.56",
"nextjs-v0.2.56",
"js-v0.2.56",
"react-v0.2.55",
"nextjs-v0.2.55",
"js-v0.2.55",
"react-v0.2.54",
"nextjs-v0.2.54",
"js-v0.2.54",
"react-v0.2.53",
"nextjs-v0.2.53",
"js-v0.2.53",
"react-v0.2.52",
"nextjs-v0.2.52",
"js-v0.2.52",
"react-v0.2.51",
"nextjs-v0.2.51",
"js-v0.2.51",
"react-v0.2.50",
"nextjs-v0.2.50",
"js-v0.2.50",
"react-v0.2.49",
"nextjs-v0.2.49",
"js-v0.2.49",
"react-v0.2.48",
"nextjs-v0.2.48",
"js-v0.2.48",
"react-v0.2.47",
"nextjs-v0.2.47",
"js-v0.2.47",
"v2.23.0",
"react-v0.2.46",
"nextjs-v0.2.46",
"js-v0.2.46",
"react-v0.2.45",
"nextjs-v0.2.45",
"js-v0.2.45",
"react-v0.2.44",
"nextjs-v0.2.44",
"js-v0.2.44",
"react-v0.2.43",
"nextjs-v0.2.43",
"js-v0.2.43",
"react-v0.2.42",
"nextjs-v0.2.42",
"js-v0.2.42",
"react-v0.2.41",
"nextjs-v0.2.41",
"js-v0.2.41",
"react-v0.2.40",
"nextjs-v0.2.40",
"js-v0.2.40",
"react-v0.2.39",
"nextjs-v0.2.39",
"js-v0.2.39",
"react-v0.2.38",
"nextjs-v0.2.38",
"js-v0.2.38",
"v2.22.0",
"react-v0.2.35",
"nextjs-v0.2.35",
"js-v0.2.35",
"react-v0.2.34",
"nextjs-v0.2.34",
"js-v0.2.34",
"react-v0.2.33",
"nextjs-v0.2.33",
"js-v0.2.33",
"react-v0.2.32",
"js-v0.2.32",
"v2.21.3",
"v2.21.2",
"v2.21.1",
"v2.21.0",
"react-v0.2.31",
"nextjs-v0.2.31",
"js-v0.2.31",
"react-v0.2.30",
"nextjs-v0.2.30",
"js-v0.2.30",
"react-v0.2.29",
"nextjs-v0.2.29",
"js-v0.2.29",
"react-v0.2.28",
"nextjs-v0.2.28",
"js-v0.2.28",
"react-v0.2.27",
"nextjs-v0.2.27",
"js-v0.2.27",
"react-v0.2.26",
"nextjs-v0.2.26",
"js-v0.2.26",
"v2.20.0",
"react-v0.2.25",
"nextjs-v0.2.25",
"js-v0.2.25",
"react-v0.2.24",
"nextjs-v0.2.24",
"js-v0.2.24",
"react-v0.2.23",
"nextjs-v0.2.23",
"js-v0.2.23",
"v2.19.1",
"react-v0.2.22",
"nextjs-v0.2.22",
"js-v0.2.22",
"react-v0.2.21",
"nextjs-v0.2.21",
"js-v0.2.21",
"react-v0.2.20",
"nextjs-v0.2.20",
"js-v0.2.20",
"react-v0.2.19",
"nextjs-v0.2.19",
"js-v0.2.19",
"react-v0.2.17",
"nextjs-v0.2.17",
"js-v0.2.17",
"react-v0.2.16",
"nextjs-v0.2.16",
"js-v0.2.16",
"react-v0.2.15",
"nextjs-v0.2.15",
"js-v0.2.15",
"react-v0.2.14",
"nextjs-v0.2.14",
"js-v0.2.14",
"v2.19.0",
"react-v0.2.12",
"nextjs-v0.2.12",
"js-v0.2.12",
"react-v0.2.11",
"nextjs-v0.2.11",
"js-v0.2.11",
"react-v0.2.10",
"nextjs-v0.2.10",
"js-v0.2.10",
"v2.18.4",
"react-v0.2.9",
"nextjs-v0.2.9",
"js-v0.2.9",
"react-v0.2.8",
"nextjs-v0.2.8",
"js-v0.2.8",
"v2.18.3",
"v2.18.2",
"react-v0.2.7",
"nextjs-v0.2.7",
"js-v0.2.7",
"react-v0.2.6",
"nextjs-v0.2.6",
"js-v0.2.6",
"react-v0.2.5",
"nextjs-v0.2.5",
"js-v0.2.5",
"v2.18.1",
"react-v0.2.4",
"nextjs-v0.2.4",
"js-v0.2.4",
"react-v0.2.3",
"nextjs-v0.2.3",
"js-v0.2.3",
"react-v0.2.2",
"nextjs-v0.2.2",
"js-v0.2.2",
"react-v0.2.1",
"nextjs-v0.2.1",
"js-v0.2.1",
"react-v0.2.0",
"nextjs-v0.2.0",
"js-v0.2.0",
"react-v0.1.34",
"nextjs-v0.1.34",
"js-v0.1.34",
"v2.18.0",
"react-v0.1.33",
"nextjs-v0.1.33",
"js-v0.1.33",
"react-v0.1.32",
"nextjs-v0.1.32",
"js-v0.1.32",
"react-v0.1.31",
"nextjs-v0.1.31",
"js-v0.1.31",
"react-v0.1.30",
"nextjs-v0.1.30",
"js-v0.1.30",
"react-v0.1.29",
"nextjs-v0.1.29",
"js-v0.1.29",
"react-v0.1.27",
"nextjs-v0.1.27",
"js-v0.1.27",
"react-v0.1.26",
"nextjs-v0.1.26",
"js-v0.1.26",
"react-v0.1.25",
"nextjs-v0.1.25",
"js-v0.1.25",
"v2.17.2",
"v2.17.1",
"react-v0.1.24",
"nextjs-v0.1.24",
"js-v0.1.24",
"v2.17.0",
"react-v0.1.23",
"nextjs-v0.1.23",
"js-v0.1.23",
"react-v0.1.21",
"nextjs-v0.1.21",
"js-v0.1.21",
"react-v0.1.20",
"nextjs-v0.1.20",
"js-v0.1.20",
"react-v0.1.18",
"nextjs-v0.1.18",
"js-v0.1.18",
"react-v0.1.17",
"nextjs-v0.1.17",
"js-v0.1.17",
"react-v0.1.16",
"nextjs-v0.1.16",
"js-v0.1.16",
"react-v0.1.15",
"nextjs-v0.1.15",
"js-v0.1.15",
"react-v0.1.14",
"nextjs-v0.1.14",
"js-v0.1.14",
"v2.16.0",
"react-v0.1.13",
"nextjs-v0.1.13",
"js-v0.1.13",
"react-v0.1.12",
"nextjs-v0.1.12",
"js-v0.1.12",
"react-v0.1.11",
"nextjs-v0.1.11",
"js-v0.1.11",
"react-v0.1.10",
"nextjs-v0.1.10",
"js-v0.1.10",
"react-v0.1.8",
"nextjs-v0.1.8",
"js-v0.1.8",
"react-v0.1.7",
"nextjs-v0.1.7",
"js-v0.1.7",
"react-v0.1.6",
"nextjs-v0.1.6",
"js-v0.1.6",
"react-v0.1.5",
"nextjs-v0.1.5",
"js-v0.1.5",
"react-v0.1.4",
"nextjs-v0.1.4",
"js-v0.1.4",
"react-v0.1.3",
"nextjs-v0.1.3",
"js-v0.1.3",
"v2.15.2",
"nextjs-v0.1.2",
"react-v0.1.2",
"js-v0.1.2",
"react-v0.1.1",
"js-v0.1.1",
"react-v0.1.0",
"nextjs-v0.1.0",
"js-v0.1.0",
"react-v0.0.80",
"js-v0.0.80",
"react-v0.0.79",
"js-v0.0.79",
"react-v0.0.78",
"js-v0.0.78",
"react-v0.0.77",
"js-v0.0.77",
"react-v0.0.76",
"js-v0.0.76",
"react-v0.0.75",
"js-v0.0.75",
"react-v0.0.74",
"js-v0.0.74",
"react-v0.0.73",
"js-v0.0.73",
"react-v0.0.72",
"js-v0.0.72",
"react-v0.0.71",
"js-v0.0.71",
"react-v0.0.70",
"js-v0.0.70",
"react-v0.0.69",
"js-v0.0.69",
"v2.15.1",
"react-v0.0.68",
"js-v0.0.68",
"react-v0.0.67",
"js-v0.0.67",
"v2.15.0",
"react-v0.0.66",
"js-v0.0.66",
"react-v0.0.64",
"js-v0.0.64",
"v2.14.1",
"react-v0.0.63",
"js-v0.0.63",
"v2.14.0",
"react-v0.0.62",
"js-v0.0.62",
"react-v0.0.61",
"js-v0.0.61",
"react-v0.0.60",
"js-v0.0.60",
"v2.13.5",
"react-v0.0.59",
"js-v0.0.59",
"react-v0.0.57",
"js-v0.0.57",
"react-v0.0.56",
"js-v0.0.56",
"react-v0.0.55",
"js-v0.0.55",
"react-v0.0.54",
"js-v0.0.54",
"react-v0.0.53",
"js-v0.0.53",
"v2.13.4",
"react-v0.0.52",
"js-v0.0.52",
"v2.13.3",
"react-v0.0.51",
"js-v0.0.51",
"react-v0.0.50",
"js-v0.0.50",
"v2.13.2",
"react-v0.0.49",
"js-v0.0.49",
"react-v0.0.48",
"js-v0.0.48",
"v2.13.1",
"react-v0.0.47",
"js-v0.0.47",
"v2.13.0",
"react-v0.0.45",
"js-v0.0.45",
"react-v0.0.44",
"js-v0.0.44",
"react-v0.0.43",
"js-v0.0.43",
"v2.12.3",
"react-v0.0.42",
"js-v0.0.42",
"react-v0.0.41",
"js-v0.0.41",
"react-v0.0.40",
"js-v0.0.40",
"react-v0.0.39",
"js-v0.0.39",
"react-v0.0.38",
"js-v0.0.38",
"v2.12.2",
"react-v0.0.37",
"js-v0.0.37",
"v2.12.1",
"react-v0.0.36",
"js-v0.0.36",
"react-v0.0.35",
"js-v0.0.35",
"react-v0.0.34",
"js-v0.0.34",
"v2.12.0",
"react-v0.0.33",
"js-v0.0.33",
"react-v0.0.32",
"js-v0.0.32",
"v2.11.9",
"react-v0.0.31",
"js-v0.0.31",
"v2.11.8",
"v2.11.7",
"react-v0.0.30",
"js-v0.0.30",
"v2.11.6",
"react-v0.0.29",
"js-v0.0.29",
"v2.11.5",
"react-v0.0.28",
"js-v0.0.28",
"v2.11.4",
"react-v0.0.27",
"js-v0.0.27",
"react-v0.0.26",
"js-v0.0.26",
"react-v0.0.25",
"js-v0.0.25",
"react-v0.0.24",
"js-v0.0.24",
"react-v0.0.23",
"js-v0.0.23",
"react-v0.0.22",
"js-v0.0.22",
"v2.11.3",
"react-v0.0.21",
"js-v0.0.21",
"react-v0.0.20",
"js-v0.0.20",
"v2.11.2",
"react-v0.0.19",
"js-v0.0.19",
"v2.11.1",
"react-v0.0.18",
"js-v0.0.18",
"v2.11.0",
"react-v0.0.17",
"js-v0.0.17",
"react-v0.0.16",
"js-v0.0.16",
"react-v0.0.15",
"js-v0.0.15",
"v2.10.5",
"react-v0.0.14",
"js-v0.0.14",
"js-lib-v2.2.17",
"react-v0.0.13",
"js-v0.0.13",
"react-v0.0.12",
"js-v0.0.12",
"react-v0.0.11",
"js-v0.0.11",
"react-v0.0.10",
"js-v0.0.10",
"react-v0.0.9",
"js-v0.0.9",
"react-v0.0.8",
"js-v0.0.8",
"react-v0.0.7",
"js-v0.0.7",
"react-v0.0.6",
"js-v0.0.6",
"react-v0.0.5",
"js-v0.0.5",
"react-v0.0.4",
"js-v0.0.4",
"react-v0.0.3",
"js-v0.0.3",
"v2.10.4",
"v2.10.3",
"v2.10.2",
"v2.10.1",
"v2.10.0",
"react-v0.0.2",
"js-v0.0.2",
"v2.9.4",
"v2.9.3",
"react-v0.0.1",
"js-v0.0.1",
"v2.9.2",
"v2.9.1",
"js-lib-v2.2.16",
"v2.9.0",
"js-lib-v2.2.15",
"v2.8.12",
"v2.8.11",
"v2.8.10",
"v2.8.9",
"v2.8.8",
"v2.8.7",
"v2.8.6",
"v2.8.5",
"js-lib-v2.2.13",
"js-lib-v2.2.12",
"js-lib-v2.2.11",
"js-lib-v2.2.10",
"v2.8.3",
"v2.8.1",
"v2.8.0",
"v2.7.1",
"v2.7.0",
"v2.6.2",
"v2.6.1",
"v2.6.0",
"js-lib-v2.2.9",
"v2.2.9",
"v2.5.1",
"v2.5.0",
"v2.4.0",
"v2.3.0",
"v2.2.1",
"v2.2.0",
"v2.1.2",
"v2.1.1",
"js-lib-v2.2.8",
"js-lib-v2.2.7",
"js-lib-v2.2.6",
"v2.1.0",
"v2.0.0",
"js-lib-v2.2.5",
"js-lib-v2.2.4",
"js-lib-v2.2.3",
"js-lib-v2.2.2",
"js-lib-v2.2.1",
"js-lib-v2.2.0",
"js-lib-v2.1.4"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-47704.json"
}
}
],
"modified": "2026-10-28T02:30:23.049479972Z",
"provider": "osv",
"references": [
"https://github.com/baptisteArno/typebot.io/releases/tag/v3.17.0",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47704.json",
"https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-h67g-6q6g-58cj",
"https://nvd.nist.gov/vuln/detail/CVE-2026-47704",
"https://github.com/baptisteArno/typebot.io/commit/6f915c3096bd43d4a913f0f2c7a92e8463f81a86",
"https://github.com/baptisteArno/typebot.io/pull/2494"
],
"provider_metadata": {
"cwe_ids": [
"CWE-639"
],
"cna_assigner": "GitHub_M",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47704.json"
}
},
"related_cves": [
{
"value": "CVE-2026-47704",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 489672,
"published_at": "2026-08-11T16:23:07.988+00:00"
}