https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:31:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-275004 EUVD-2026-275004 https://cve.radiocsirt.org/vuln/euvd-2026-275004 https://cve.radiocsirt.org/vuln/fkie_cve-2026-30838 <p>league/commonmark is a PHP Markdown parser. Prior to version 2.8.1, the DisallowedRawHtml extension can be bypassed by inserting a newline, tab, or other ASCII whitespace character between a disallowed HTML tag name and the closing &gt;. For example, &lt;script\n&gt; would pass through unfiltered and be rendered as a valid HTML tag by browsers. This is a cross-site scripting (XSS) vector for any application that relies on this extension to sanitize untrusted user input. All applications using the DisallowedRawHtml extension to process untrusted markdown are affected. Applications that use a dedicated HTML sanitizer (such as HTML Purifier) on the rendered output are not affected. This issue has been patched in version 2.8.1.</p> <p>league/commonmark is a PHP Markdown parser. Prior to version 2.8.1, the DisallowedRawHtml extension can be bypassed by inserting a newline, tab, or other ASCII whitespace character between a disallowed HTML tag name and the closing &gt;. For example, &lt;script\n&gt; would pass through unfiltered and be rendered as a valid HTML tag by browsers. This is a cross-site scripting (XSS) vector for any application that relies on this extension to sanitize untrusted user input. All applications using the DisallowedRawHtml extension to process untrusted markdown are affected. Applications that use a dedicated HTML sanitizer (such as HTML Purifier) on the rendered output are not affected. This issue has been patched in version 2.8.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-30838 https://cve.radiocsirt.org/vuln/ghsa-4v6x-c7xx-hw9f <p><strong>Affected:</strong> Packagist: league/commonmark</p> <p>### Impact</p> <p>The `DisallowedRawHtml` extension can be bypassed by inserting a newline, tab, or other ASCII whitespace character between a disallowed HTML tag name and the closing `&gt;`. For example, `&lt;script\n&gt;` would pass through unfiltered and be rendered as a valid HTML tag by browsers. This is a cross-site scripting (XSS) vector for any application that relies on this extension to sanitize untrusted user input.</p> <p>All applications using the `DisallowedRawHtml` extension to process untrusted markdown are affected. Applications that use a dedicated HTML sanitizer (such as HTML Purifier) on the rendered output are not affected.</p> <p>### Patches</p> <p>Fixed in 2.8.1. The regex character class `[ \/&gt;]` was changed to `[\s\/&gt;]` to match all whitespace characters that browsers accept as valid tag name terminators.</p> <p>### Workarounds</p> <p>- Set the `html_input` configuration option to `&#39;escape&#39;` or `&#39;strip&#39;` to disable all raw HTML, though this is a broader restriction than the `DisallowedRawHtml` extension provides. - Pass the rendered HTML through a dedicated HTML sanitizer before serving it to users ([always recommended](https://commonmark.thephpleague.com/2.x/security/#additional-filtering))</p> <p><strong>Affected:</strong> Packagist: league/commonmark</p> <p>### Impact</p> <p>The `DisallowedRawHtml` extension can be bypassed by inserting a newline, tab, or other ASCII whitespace character between a disallowed HTML tag name and the closing `&gt;`. For example, `&lt;script\n&gt;` would pass through unfiltered and be rendered as a valid HTML tag by browsers. This is a cross-site scripting (XSS) vector for any application that relies on this extension to sanitize untrusted user input.</p> <p>All applications using the `DisallowedRawHtml` extension to process untrusted markdown are affected. Applications that use a dedicated HTML sanitizer (such as HTML Purifier) on the rendered output are not affected.</p> <p>### Patches</p> <p>Fixed in 2.8.1. The regex character class `[ \/&gt;]` was changed to `[\s\/&gt;]` to match all whitespace characters that browsers accept as valid tag name terminators.</p> <p>### Workarounds</p> <p>- Set the `html_input` configuration option to `&#39;escape&#39;` or `&#39;strip&#39;` to disable all raw HTML, though this is a broader restriction than the `DisallowedRawHtml` extension provides. - Pass the rendered HTML through a dedicated HTML sanitizer before serving it to users ([always recommended](https://commonmark.thephpleague.com/2.x/security/#additional-filtering))</p> https://cve.radiocsirt.org/vuln/ghsa-4v6x-c7xx-hw9f https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-30838 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: php-league-commonmark, Ubuntu:Pro:22.04:LTS: php-league-commonmark, Ubuntu:Pro:24.04:LTS: php-league-commonmark, Ubuntu:25.10: php-league-commonmark, Ubuntu:26.04:LTS: php-league-commonmark</p> <p>league/commonmark is a PHP Markdown parser. Prior to version 2.8.1, the DisallowedRawHtml extension can be bypassed by inserting a newline, tab, or other ASCII whitespace character between a disallowed HTML tag name and the closing &gt;. For example, &lt;script\n&gt; would pass through unfiltered and be rendered as a valid HTML tag by browsers. This is a cross-site scripting (XSS) vector for any application that relies on this extension to sanitize untrusted user input. All applications using the DisallowedRawHtml extension to process untrusted markdown are affected. Applications that use a dedicated HTML sanitizer (such as HTML Purifier) on the rendered output are not affected. This issue has been patched in version 2.8.1.</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: php-league-commonmark, Ubuntu:Pro:22.04:LTS: php-league-commonmark, Ubuntu:Pro:24.04:LTS: php-league-commonmark, Ubuntu:25.10: php-league-commonmark, Ubuntu:26.04:LTS: php-league-commonmark</p> <p>league/commonmark is a PHP Markdown parser. Prior to version 2.8.1, the DisallowedRawHtml extension can be bypassed by inserting a newline, tab, or other ASCII whitespace character between a disallowed HTML tag name and the closing &gt;. For example, &lt;script\n&gt; would pass through unfiltered and be rendered as a valid HTML tag by browsers. This is a cross-site scripting (XSS) vector for any application that relies on this extension to sanitize untrusted user input. All applications using the DisallowedRawHtml extension to process untrusted markdown are affected. Applications that use a dedicated HTML sanitizer (such as HTML Purifier) on the rendered output are not affected. This issue has been patched in version 2.8.1.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-30838 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1001 <p>Ein Angreifer kann mehrere Schwachstellen in Snipe-IT ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und potenziell um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Snipe-IT ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und potenziell um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1001