The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to 02 January 2025, a reflected Cross Site Scripting (XSS) vulnerability in the toast notification system allows any attacker to execute arbitrary JavaScript in the context of a victim's browser session by crafting a malicious URL. A series of fix commits on 02 January 2025 fixed this and other vulnerabilities.
References
| Link | Resource |
|---|---|
| https://github.com/the-hideout/tarkov-data-manager/security/advisories/GHSA-9c23-rrg9-jc89 | Exploit Vendor Advisory |
Configurations
History
03 Feb 2026, 16:20
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Tarkov tarkov Data Manager
Tarkov |
|
| CPE | cpe:2.3:a:tarkov:tarkov_data_manager:*:*:*:*:*:*:*:* | |
| References | () https://github.com/the-hideout/tarkov-data-manager/security/advisories/GHSA-9c23-rrg9-jc89 - Exploit, Vendor Advisory |
Information
Published : 2026-01-07 19:15
Updated : 2026-02-03 16:20
NVD link : CVE-2026-21855
Mitre link : CVE-2026-21855
CVE.ORG link : CVE-2026-21855
JSON object : View
Products Affected
tarkov
- tarkov_data_manager
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')