https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:35:52.572057+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-80955 EUVD-2026-80955 2026-10-03T05:35:52.705718+00:00 EUVD-2026-80955 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1002201 fkie_cve-2017-1002201 2026-10-03T05:35:52.705769+00:00

In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like < > " ' must be escaped properly. In this case, the ' character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.

 https://cve.radiocsirt.org/vuln/ghsa-r53w-g4xm-3gc6 GHSA-r53w-g4xm-3gc6 — Haml vulnerable to cross-site scripting 2026-10-03T05:35:52.705803+00:00

Affected: RubyGems: haml

In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like `< > " '` must be escaped properly. In this case, the `'` character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.

 https://cve.radiocsirt.org/vuln/gsd-2017-1002201 gsd-2017-1002201 2026-10-03T05:35:52.705829+00:00 gsd-2017-1002201 https://cve.radiocsirt.org/vuln/suse-su-2019:2932-1 SUSE-SU-2019:2932-1 — Security update for rubygem-haml 2026-10-03T05:35:52.705841+00:00

Security update for rubygem-haml

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-1002201 UBUNTU-CVE-2017-1002201 2026-10-03T05:35:52.705860+00:00

Affected: Ubuntu:Pro:14.04:LTS: ruby-haml, Ubuntu:16.04:LTS: ruby-haml, Ubuntu:18.04:LTS: ruby-haml

In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like < > " ' must be escaped properly. In this case, the ' character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.