https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:02:38 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-252129 EUVD-2026-252129 https://cve.radiocsirt.org/vuln/euvd-2026-252129 https://cve.radiocsirt.org/vuln/fkie_cve-2014-125128 <p>&#39;sanitize-html&#39; prior to version 1.0.3 is vulnerable to Cross-site Scripting (XSS). The function &#39;naughtyHref&#39; doesn&#39;t properly validate the hyperreference (`href`) attribute in anchor tags (`&lt;a&gt;`), allowing bypasses that contain different casings, whitespace characters, or hexadecimal encodings.</p> <p>&#39;sanitize-html&#39; prior to version 1.0.3 is vulnerable to Cross-site Scripting (XSS). The function &#39;naughtyHref&#39; doesn&#39;t properly validate the hyperreference (`href`) attribute in anchor tags (`&lt;a&gt;`), allowing bypasses that contain different casings, whitespace characters, or hexadecimal encodings.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-125128 https://cve.radiocsirt.org/vuln/ghsa-389w-f784-rjg3 <p>&#39;sanitize-html&#39; prior to version 1.0.3 is vulnerable to Cross-site Scripting (XSS). The function &#39;naughtyHref&#39; doesn&#39;t properly validate the hyperreference (`href`) attribute in anchor tags (`&lt;a&gt;`), allowing bypasses that contain different casings, whitespace characters, or hexadecimal encodings.</p> <p>&#39;sanitize-html&#39; prior to version 1.0.3 is vulnerable to Cross-site Scripting (XSS). The function &#39;naughtyHref&#39; doesn&#39;t properly validate the hyperreference (`href`) attribute in anchor tags (`&lt;a&gt;`), allowing bypasses that contain different casings, whitespace characters, or hexadecimal encodings.</p> https://cve.radiocsirt.org/vuln/ghsa-389w-f784-rjg3 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-125128 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: node-sanitize-html, Ubuntu:24.04:LTS: node-sanitize-html, Ubuntu:25.10: node-sanitize-html, Ubuntu:26.04:LTS: node-sanitize-html</p> <p>&#39;sanitize-html&#39; prior to version 1.0.3 is vulnerable to Cross-site Scripting (XSS). The function &#39;naughtyHref&#39; doesn&#39;t properly validate the hyperreference (`href`) attribute in anchor tags (`&lt;a&gt;`), allowing bypasses that contain different casings, whitespace characters, or hexadecimal encodings.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: node-sanitize-html, Ubuntu:24.04:LTS: node-sanitize-html, Ubuntu:25.10: node-sanitize-html, Ubuntu:26.04:LTS: node-sanitize-html</p> <p>&#39;sanitize-html&#39; prior to version 1.0.3 is vulnerable to Cross-site Scripting (XSS). The function &#39;naughtyHref&#39; doesn&#39;t properly validate the hyperreference (`href`) attribute in anchor tags (`&lt;a&gt;`), allowing bypasses that contain different casings, whitespace characters, or hexadecimal encodings.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-125128