https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 21:04:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-372383 EUVD-2026-372383 https://cve.radiocsirt.org/vuln/euvd-2026-372383 https://cve.radiocsirt.org/vuln/fkie_cve-2026-77607 <p>Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki&#39;s pages. Prior to version 7.2.0, `sep` was inserted verbatim into HTML cell joins. This made it possible to inject HTML through the separator value. Version 7.2.0 fixes the issue.</p> <p>Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki&#39;s pages. Prior to version 7.2.0, `sep` was inserted verbatim into HTML cell joins. This made it possible to inject HTML through the separator value. Version 7.2.0 fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-77607 https://cve.radiocsirt.org/vuln/ghsa-7xv3-gf2g-498h <p><strong>Affected:</strong> Packagist: mediawiki/semantic-media-wiki</p> <p>#### Failure mode</p> <p>`sep` was inserted verbatim into the HTML that joins a table cell&#39;s values. This made it possible to inject HTML through the separator value. The same unsanitised table HTML is produced both for the standard `Special:Ask` render and for its raw request output (`request_type=raw`), so the injection was reachable without authentication.</p> <p>#### Remediation</p> <p>- In all non-wiki output modes (HTML, raw request, file), `sep` is escaped unless it is a safe `&lt;br&gt;` variant. - This preserves legitimate line-break separators while blocking markup injection.</p> <p>#### Maintenance note</p> <p>If the table renderer ever gains richer separator semantics, keep the whitelist explicit. Do not expand the allowed HTML surface casually.</p> <p><strong>Affected:</strong> Packagist: mediawiki/semantic-media-wiki</p> <p>#### Failure mode</p> <p>`sep` was inserted verbatim into the HTML that joins a table cell&#39;s values. This made it possible to inject HTML through the separator value. The same unsanitised table HTML is produced both for the standard `Special:Ask` render and for its raw request output (`request_type=raw`), so the injection was reachable without authentication.</p> <p>#### Remediation</p> <p>- In all non-wiki output modes (HTML, raw request, file), `sep` is escaped unless it is a safe `&lt;br&gt;` variant. - This preserves legitimate line-break separators while blocking markup injection.</p> <p>#### Maintenance note</p> <p>If the table renderer ever gains richer separator semantics, keep the whitelist explicit. Do not expand the allowed HTML surface casually.</p> https://cve.radiocsirt.org/vuln/ghsa-7xv3-gf2g-498h