Product
A stored cross-site scripting (XSS) vulnerability (CVE-2026-73031) in telegram-search allows remote attackers to execute arbitrary JavaScript by injecting unsanitized HTML into shared Telegram messages.