https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 14:14:28 +0000 https://cve.radiocsirt.org/vuln/cve-2025-56200 <p>A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL() function uses &#39;://&#39; as a delimiter to parse protocols, while browsers use &#39;:&#39; as the delimiter. This parsing difference allows attackers to bypass protocol and domain validation by crafting URLs leading to XSS and Open Redirect attacks.</p> <p>A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL() function uses &#39;://&#39; as a delimiter to parse protocols, while browsers use &#39;:&#39; as the delimiter. This parsing difference allows attackers to bypass protocol and domain validation by crafting URLs leading to XSS and Open Redirect attacks.</p> https://cve.radiocsirt.org/vuln/cve-2025-56200