https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:12:16 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-80955 EUVD-2026-80955 https://cve.radiocsirt.org/vuln/euvd-2026-80955 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1002201 <p>In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like &lt; &gt; &#34; &#39; must be escaped properly. In this case, the &#39; character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.</p> <p>In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like &lt; &gt; &#34; &#39; must be escaped properly. In this case, the &#39; character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-1002201 https://cve.radiocsirt.org/vuln/ghsa-r53w-g4xm-3gc6 <p><strong>Affected:</strong> RubyGems: haml</p> <p>In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like `&lt; &gt; &#34; &#39;` must be escaped properly. In this case, the `&#39;` character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.</p> <p><strong>Affected:</strong> RubyGems: haml</p> <p>In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like `&lt; &gt; &#34; &#39;` must be escaped properly. In this case, the `&#39;` character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.</p> https://cve.radiocsirt.org/vuln/ghsa-r53w-g4xm-3gc6 https://cve.radiocsirt.org/vuln/gsd-2017-1002201 gsd-2017-1002201 https://cve.radiocsirt.org/vuln/gsd-2017-1002201 https://cve.radiocsirt.org/vuln/suse-su-2019:2932-1 <p>Security update for rubygem-haml</p> <p>Security update for rubygem-haml</p> https://cve.radiocsirt.org/vuln/suse-su-2019:2932-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-1002201 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: ruby-haml, Ubuntu:16.04:LTS: ruby-haml, Ubuntu:18.04:LTS: ruby-haml</p> <p>In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like &lt; &gt; &#34; &#39; must be escaped properly. In this case, the &#39; character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: ruby-haml, Ubuntu:16.04:LTS: ruby-haml, Ubuntu:18.04:LTS: ruby-haml</p> <p>In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like &lt; &gt; &#34; &#39; must be escaped properly. In this case, the &#39; character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-1002201