https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 01:39:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-355316 EUVD-2026-355316 https://cve.radiocsirt.org/vuln/euvd-2026-355316 https://cve.radiocsirt.org/vuln/fkie_cve-2026-66829 <p>URL Redirection to Untrusted Site (&#39;Open Redirect&#39;) vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows a remote attacker to force visitors of a page to navigate to a site of the attacker&#39;s choosing via a &lt;meta http-equiv=&#34;refresh&#34;&gt; element in sanitized HTML. HtmlSanitizeEx.html5/1 keeps attacker-supplied &lt;meta&gt; elements in its output. A meta element acts on the whole document rather than on the fragment it was embedded in, so it can also declare document-wide directives such as Content-Security-Policy.</p> <p>This is not cross-site scripting. Browsers do not navigate a meta refresh to a javascript: URL, so the uppercase JAVASCRIPT: filter bypass yields no script execution and none was demonstrated.</p> <p>This issue affects html_sanitize_ex: from 0.3.1 before 1.4.5 and from 1.5.0-rc.0 before 1.5.3.</p> <p>URL Redirection to Untrusted Site (&#39;Open Redirect&#39;) vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows a remote attacker to force visitors of a page to navigate to a site of the attacker&#39;s choosing via a &lt;meta http-equiv=&#34;refresh&#34;&gt; element in sanitized HTML. HtmlSanitizeEx.html5/1 keeps attacker-supplied &lt;meta&gt; elements in its output. A meta element acts on the whole document rather than on the fragment it was embedded in, so it can also declare document-wide directives such as Content-Security-Policy.</p> <p>This is not cross-site scripting. Browsers do not navigate a meta refresh to a javascript: URL, so the uppercase JAVASCRIPT: filter bypass yields no script execution and none was demonstrated.</p> <p>This issue affects html_sanitize_ex: from 0.3.1 before 1.4.5 and from 1.5.0-rc.0 before 1.5.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-66829 https://cve.radiocsirt.org/vuln/ghsa-c486-5fvq-fp3v <p>URL Redirection to Untrusted Site (&#39;Open Redirect&#39;) vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows a remote attacker to force visitors of a page to navigate to a site of the attacker&#39;s choosing via a &lt;meta http-equiv=&#34;refresh&#34;&gt; element in sanitized HTML. HtmlSanitizeEx.html5/1 keeps attacker-supplied &lt;meta&gt; elements in its output. A meta element acts on the whole document rather than on the fragment it was embedded in, so it can also declare document-wide directives such as Content-Security-Policy.</p> <p>This is not cross-site scripting. Browsers do not navigate a meta refresh to a javascript: URL, so the uppercase JAVASCRIPT: filter bypass yields no script execution and none was demonstrated.</p> <p>This issue affects html_sanitize_ex: from 0.3.1 before 1.5.3.</p> <p>URL Redirection to Untrusted Site (&#39;Open Redirect&#39;) vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows a remote attacker to force visitors of a page to navigate to a site of the attacker&#39;s choosing via a &lt;meta http-equiv=&#34;refresh&#34;&gt; element in sanitized HTML. HtmlSanitizeEx.html5/1 keeps attacker-supplied &lt;meta&gt; elements in its output. A meta element acts on the whole document rather than on the fragment it was embedded in, so it can also declare document-wide directives such as Content-Security-Policy.</p> <p>This is not cross-site scripting. Browsers do not navigate a meta refresh to a javascript: URL, so the uppercase JAVASCRIPT: filter bypass yields no script execution and none was demonstrated.</p> <p>This issue affects html_sanitize_ex: from 0.3.1 before 1.5.3.</p> https://cve.radiocsirt.org/vuln/ghsa-c486-5fvq-fp3v