https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:08:52 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-330270 EUVD-2026-330270 https://cve.radiocsirt.org/vuln/euvd-2026-330270 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47733 <p>Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, the ImageElement component in packages/gazzodown renders user-controlled src values directly into &lt;a href&gt; and &lt;img src&gt; attributes without protocol sanitization. Unlike the analogous LinkSpan component — which uses sanitizeUrl to block javascript:, data:, and vbscript: protocols — ImageElement passes the raw URL through unchanged. An authenticated user can post a markdown image with a javascript: URL that, if clicked on an older browser, would execute arbitrary JavaScript in the viewer&#39;s session. This vulnerability is fixed in 8.5.0.</p> <p>Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, the ImageElement component in packages/gazzodown renders user-controlled src values directly into &lt;a href&gt; and &lt;img src&gt; attributes without protocol sanitization. Unlike the analogous LinkSpan component — which uses sanitizeUrl to block javascript:, data:, and vbscript: protocols — ImageElement passes the raw URL through unchanged. An authenticated user can post a markdown image with a javascript: URL that, if clicked on an older browser, would execute arbitrary JavaScript in the viewer&#39;s session. This vulnerability is fixed in 8.5.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-47733