https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 10:10:15 +0000 https://cve.radiocsirt.org/vuln/cve-2026-55890 <p><strong>Affected:</strong> getgrav grav</p> <p>Grav is a file-based Web platform. Prior to 2.0.0-rc.9, Grav&#39;s incomplete fix for stored XSS through the Markdown media attribute action (CVE-2026-42841) leaves the sibling MediaObjectTrait::style method reachable through the same Markdown excerpt-action pipeline, allowing an editor to save Markdown image style parameters that are written into the rendered img style attribute without sanitization. This issue is fixed in version 2.0.0-rc.9.</p> <p><strong>Affected:</strong> getgrav grav</p> <p>Grav is a file-based Web platform. Prior to 2.0.0-rc.9, Grav&#39;s incomplete fix for stored XSS through the Markdown media attribute action (CVE-2026-42841) leaves the sibling MediaObjectTrait::style method reachable through the same Markdown excerpt-action pipeline, allowing an editor to save Markdown image style parameters that are written into the rendered img style attribute without sanitization. This issue is fixed in version 2.0.0-rc.9.</p> https://cve.radiocsirt.org/vuln/cve-2026-55890