https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:28:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-68170 EUVD-2026-68170 https://cve.radiocsirt.org/vuln/euvd-2026-68170 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16481 <p>A XSS vulnerability was found in html-page &lt;=2.1.1 that allows malicious Javascript code to be executed in the user&#39;s browser due to the absence of sanitization of the paths before rendering.</p> <p>A XSS vulnerability was found in html-page &lt;=2.1.1 that allows malicious Javascript code to be executed in the user&#39;s browser due to the absence of sanitization of the paths before rendering.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-16481 https://cve.radiocsirt.org/vuln/ghsa-5p26-hw7f-3cpr <p><strong>Affected:</strong> npm: html-pages</p> <p>All versions of `html-pages` are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize folder names, allowing attackers to execute arbitrary JavaScript in the victim&#39;s browser through folders with names containing malicious code.</p> <p>## Recommendation</p> <p>No fix is currently available. Consider using an alternative package until a fix is made available.</p> <p><strong>Affected:</strong> npm: html-pages</p> <p>All versions of `html-pages` are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize folder names, allowing attackers to execute arbitrary JavaScript in the victim&#39;s browser through folders with names containing malicious code.</p> <p>## Recommendation</p> <p>No fix is currently available. Consider using an alternative package until a fix is made available.</p> https://cve.radiocsirt.org/vuln/ghsa-5p26-hw7f-3cpr https://cve.radiocsirt.org/vuln/gsd-2018-16481 gsd-2018-16481 https://cve.radiocsirt.org/vuln/gsd-2018-16481