https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:12:14 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-266 certfr-2022-avi-266 https://cve.radiocsirt.org/vuln/certfr-2022-avi-266 https://cve.radiocsirt.org/vuln/cnvd-2019-44132 cnvd-2019-44132 https://cve.radiocsirt.org/vuln/cnvd-2019-44132 https://cve.radiocsirt.org/vuln/euvd-2026-56706 EUVD-2026-56706 https://cve.radiocsirt.org/vuln/euvd-2026-56706 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14863 <p>There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.</p> <p>There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-14863 https://cve.radiocsirt.org/vuln/ghsa-r5fx-8r73-v86c <p><strong>Affected:</strong> npm: angular</p> <p>Versions of `angular` prior to 1.5.0-beta.1 are vulnerable to Cross-Site Scripting. The package fails to sanitize `xlink:href` attributes, which may allow attackers to execute arbitrary JavaScript in a victim&#39;s browser if the value is user-controlled.</p> <p>## Recommendation</p> <p>Upgrade to version 1.5.0-beta.1 or later.</p> <p><strong>Affected:</strong> npm: angular</p> <p>Versions of `angular` prior to 1.5.0-beta.1 are vulnerable to Cross-Site Scripting. The package fails to sanitize `xlink:href` attributes, which may allow attackers to execute arbitrary JavaScript in a victim&#39;s browser if the value is user-controlled.</p> <p>## Recommendation</p> <p>Upgrade to version 1.5.0-beta.1 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-r5fx-8r73-v86c https://cve.radiocsirt.org/vuln/gsd-2019-14863 gsd-2019-14863 https://cve.radiocsirt.org/vuln/gsd-2019-14863 https://cve.radiocsirt.org/vuln/rhsa-2019:4069 <p>knockout: Cross-site Scripting (XSS) attacks due to not escaping the name attribute. angular: Cross-site Scripting (XSS) due to no proper sanitization of xlink:href attributes</p> <p>knockout: Cross-site Scripting (XSS) attacks due to not escaping the name attribute. angular: Cross-site Scripting (XSS) due to no proper sanitization of xlink:href attributes</p> https://cve.radiocsirt.org/vuln/rhsa-2019:4069 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14863 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: angular.js</p> <p>There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: angular.js</p> <p>There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14863