https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 11:26:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-355317 EUVD-2026-355317 https://cve.radiocsirt.org/vuln/euvd-2026-355317 https://cve.radiocsirt.org/vuln/fkie_cve-2026-66370 <p>URL Redirection to Untrusted Site (&#39;Open Redirect&#39;) vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows an unauthenticated remote attacker to retarget a form already on the rendering page and receive whatever the victim submits, including credentials, via the form and formaction attributes on an &lt;input&gt; element in sanitized HTML. HTML&#39;s form attribute associates an input with any form on the page by its id even when the input sits outside that form, and formaction on a submit control overrides the owning form&#39;s action. Neither attribute receives a scheme check, so an absolute cross-origin URL survives sanitizing.</p> <p>No script executes. The scrubber allows neither form nor button, so the attacker cannot introduce a form of their own and the rendering page must already contain a form carrying an id.</p> <p>This issue affects html_sanitize_ex: from 0.3.1 before 1.4.5 and from 1.5.0-rc.0 before 1.5.3.</p> <p>URL Redirection to Untrusted Site (&#39;Open Redirect&#39;) vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows an unauthenticated remote attacker to retarget a form already on the rendering page and receive whatever the victim submits, including credentials, via the form and formaction attributes on an &lt;input&gt; element in sanitized HTML. HTML&#39;s form attribute associates an input with any form on the page by its id even when the input sits outside that form, and formaction on a submit control overrides the owning form&#39;s action. Neither attribute receives a scheme check, so an absolute cross-origin URL survives sanitizing.</p> <p>No script executes. The scrubber allows neither form nor button, so the attacker cannot introduce a form of their own and the rendering page must already contain a form carrying an id.</p> <p>This issue affects html_sanitize_ex: from 0.3.1 before 1.4.5 and from 1.5.0-rc.0 before 1.5.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-66370 https://cve.radiocsirt.org/vuln/ghsa-r8xc-fmjg-37c5 <p>URL Redirection to Untrusted Site (&#39;Open Redirect&#39;) vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows an unauthenticated remote attacker to retarget a form already on the rendering page and receive whatever the victim submits, including credentials, via the form and formaction attributes on an &lt;input&gt; element in sanitized HTML. HTML&#39;s form attribute associates an input with any form on the page by its id even when the input sits outside that form, and formaction on a submit control overrides the owning form&#39;s action. Neither attribute receives a scheme check, so an absolute cross-origin URL survives sanitizing.</p> <p>No script executes. The scrubber allows neither form nor button, so the attacker cannot introduce a form of their own and the rendering page must already contain a form carrying an id.</p> <p>This issue affects html_sanitize_ex: from 0.3.1 before 1.5.3.</p> <p>URL Redirection to Untrusted Site (&#39;Open Redirect&#39;) vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows an unauthenticated remote attacker to retarget a form already on the rendering page and receive whatever the victim submits, including credentials, via the form and formaction attributes on an &lt;input&gt; element in sanitized HTML. HTML&#39;s form attribute associates an input with any form on the page by its id even when the input sits outside that form, and formaction on a submit control overrides the owning form&#39;s action. Neither attribute receives a scheme check, so an absolute cross-origin URL survives sanitizing.</p> <p>No script executes. The scrubber allows neither form nor button, so the attacker cannot introduce a form of their own and the rendering page must already contain a form carrying an id.</p> <p>This issue affects html_sanitize_ex: from 0.3.1 before 1.5.3.</p> https://cve.radiocsirt.org/vuln/ghsa-r8xc-fmjg-37c5