https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 15:49:40 +0000 https://cve.radiocsirt.org/vuln/cve-2021-43827 <p><strong>Affected:</strong> discourse-footnote</p> <p>discourse-footnote is a library providing footnotes for posts in Discourse. ### Impact When posting an inline footnote wrapped in `&lt;a&gt;` tags (e.g. `&lt;a&gt;^[footnote]&lt;/a&gt;`, the resulting rendered HTML would include a nested `&lt;a&gt;`, which is stripped by Nokogiri because it is not valid. This then caused a javascript error on topic pages because we were looking for an `&lt;a&gt;` element inside the footnote reference span and getting its ID, and because it did not exist we got a null reference error in javascript. Users are advised to update to version 0.2. As a workaround editing offending posts from the rails console or the database console for self-hosters, or disabling the plugin in the admin panel can mitigate this issue.</p> <p><strong>Affected:</strong> discourse-footnote</p> <p>discourse-footnote is a library providing footnotes for posts in Discourse. ### Impact When posting an inline footnote wrapped in `&lt;a&gt;` tags (e.g. `&lt;a&gt;^[footnote]&lt;/a&gt;`, the resulting rendered HTML would include a nested `&lt;a&gt;`, which is stripped by Nokogiri because it is not valid. This then caused a javascript error on topic pages because we were looking for an `&lt;a&gt;` element inside the footnote reference span and getting its ID, and because it did not exist we got a null reference error in javascript. Users are advised to update to version 0.2. As a workaround editing offending posts from the rails console or the database console for self-hosters, or disabling the plugin in the admin panel can mitigate this issue.</p> https://cve.radiocsirt.org/vuln/cve-2021-43827