CVE-2026-81281

A cross-site scripting (XSS) vulnerability exists in Graphene versions 2.9.4 and earlier, allowing attackers to inject malicious scripts into web pages viewed by subscribers. This can lead to unauthorized access to sensitive user information or session hijacking. Organizations using affected versions of Graphene should prioritize remediation to protect their users from potential exploitation.