Most recent entries from all

bdu:2026-04945

certfr-2025-avi-0210 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq…

certfr-2025-avi-0210

EUVD-2026-217608

fkie_cve-2025-26791

DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting (mXSS).

GHSA-vhxf-7vqr-mrjg — DOMPurify allows Cross-site Scripting (XSS)

Affected: npm: dompurify

DOMPurify before 3.2.4 has an incorrect template literal regular expression when SAFE_FOR_TEMPLATES is set to true, sometimes leading to mutation cross-site scripting (mXSS).

openSUSE-SU-2025:14921-1 — argocd-cli-2.14.8-1.1 on GA media

argocd-cli-2.14.8-1.1 on GA media

RHSA-2025:10020 — Red Hat Security Advisory: Network Observability 1.9.0 for OpenShift

dompurify: Mutation XSS in DOMPurify Due to Improper Template Literal Handling

UBUNTU-CVE-2025-26791

Affected: Ubuntu:22.04:LTS: node-dompurify, Ubuntu:24.04:LTS: node-dompurify, Ubuntu:25.10: node-dompurify, Ubuntu:26.04:LTS: node-dompurify

DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting (mXSS).

WID-SEC-W-2025-0450 — Red Hat OpenShift Service Mesh Containers: Schwachstelle ermöglicht Cross-Site Scripting

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat OpenShift Service Mesh Containers ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.