justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active...
CVE-2026-7808
justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g.,
#advisory
共收录 23507 条相关情报。
← 返回所有主题justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer...
CVE-2026-74793
justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer bypasses event handler
justhtml versions 0.9.0 through 1.21.0 contain a cross-site scripting vulnerability in...
CVE-2026-77088
justhtml versions 0.9.0 through 1.21.0 contain a cross-site scripting vulnerability in to_markdown() where inline code s
justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers ...
CVE-2026-5388
justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_st
justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site...
CVE-2026-5751
justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting (mXSS) vulnerability
justhtml versions before 1.13.0 contain a cross-site scripting vulnerability in the to_markdown()...
CVE-2026-5389
justhtml versions before 1.13.0 contain a cross-site scripting vulnerability in the to_markdown() function when serializ
justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector...
CVE-2026-4671
justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkificatio
justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and...
CVE-2026-6827
justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and programmatic DOM handling.
privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to...
CVE-2026-78155
privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privi
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected...
CVE-2026-78115
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function
A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts...
CVE-2026-78112
A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19...
CVE-2026-10053
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 1
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function...
CVE-2026-78063
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the
Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into...
CVE-2026-77115
Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without
The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during...
CVE-2026-13598
The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during account registration, al
A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some...
CVE-2026-78060
A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of t
The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to...
CVE-2026-77003
The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being c
The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one...
CVE-2026-14853
The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, a
A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function...
CVE-2026-78061
A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/
A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the...
CVE-2026-78062
A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the function envSchema.parse of t