https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 05:55:51 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-358256 EUVD-2026-358256 https://cve.radiocsirt.org/vuln/euvd-2026-358256 https://cve.radiocsirt.org/vuln/fkie_cve-2026-74793 <p>justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer bypasses event handler removal in selectedcontent projections. Attackers can inject SVG or MathML elements with event handlers that are cloned and reinserted into output without sanitization, enabling stored or reflected XSS attacks.</p> <p>justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer bypasses event handler removal in selectedcontent projections. Attackers can inject SVG or MathML elements with event handlers that are cloned and reinserted into output without sanitization, enabling stored or reflected XSS attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-74793 https://cve.radiocsirt.org/vuln/ghsa-h7rw-29pr-mcj6 <p>justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer bypasses event handler removal in selectedcontent projections. Attackers can inject SVG or MathML elements with event handlers that are cloned and reinserted into output without sanitization, enabling stored or reflected XSS attacks.</p> <p>justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer bypasses event handler removal in selectedcontent projections. Attackers can inject SVG or MathML elements with event handlers that are cloned and reinserted into output without sanitization, enabling stored or reflected XSS attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-h7rw-29pr-mcj6