Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 07:46:44 +0000 CVE-2022-23515 — Improper neutralization of data URIs may allow XSS in Loofah https://cve.radiocsirt.org/vuln/cve-2022-23515 <p><strong>Affected:</strong> flavorjones loofah</p> <p>Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah &gt;= 2.1.0, &lt; 2.19.1 is vulnerable to cross-site scripting via the image/svg+xml media type in data URIs. This issue is patched in version 2.19.1.</p> <p><strong>Affected:</strong> flavorjones loofah</p> <p>Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah &gt;= 2.1.0, &lt; 2.19.1 is vulnerable to cross-site scripting via the image/svg+xml media type in data URIs. This issue is patched in version 2.19.1.</p> https://cve.radiocsirt.org/vuln/cve-2022-23515