Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5.1.12)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(339203);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/25");

  script_cve_id(
    "CVE-2025-6170",
    "CVE-2025-13151",
    "CVE-2026-5435",
    "CVE-2026-5450",
    "CVE-2026-5928",
    "CVE-2026-6238",
    "CVE-2026-15308",
    "CVE-2026-28390",
    "CVE-2026-33416",
    "CVE-2026-34986",
    "CVE-2026-39829",
    "CVE-2026-39830",
    "CVE-2026-39832",
    "CVE-2026-41411",
    "CVE-2026-42508",
    "CVE-2026-44431",
    "CVE-2026-48864",
    "CVE-2026-48962",
    "CVE-2026-50229",
    "CVE-2026-53404",
    "CVE-2026-53434",
    "CVE-2026-54369",
    "CVE-2026-54370",
    "CVE-2026-55276",
    "CVE-2026-55955",
    "CVE-2026-55956",
    "CVE-2026-58016",
    "CVE-2026-59083",
    "CVE-2026-59084"
  );

  script_name(english:"Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5.1.12)");

  script_set_attribute(attribute:"synopsis", value:
"The Nutanix AOS host is affected by multiple vulnerabilities .");
  script_set_attribute(attribute:"description", value:
"The version of AOS installed on the remote host is prior to 7.5.1.12. It is, therefore, affected by multiple
vulnerabilities as referenced in the NXSA-AOS-7.5.1.12 advisory.

  - A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the
    gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a
    `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can
    cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.
    (CVE-2026-58016)

  - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable
    Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, `png_set_tRNS` and `png_set_PLTE`
    each alias a heap-allocated buffer between `png_struct` and `png_info`, sharing a single allocation across
    two structs with independent lifetimes. The `trans_alpha` aliasing has been present since at least libpng
    1.0, and the `palette` aliasing since at least 1.2.1. Both affect all prior release lines `png_set_tRNS`
    sets `png_ptr->trans_alpha = info_ptr->trans_alpha` (256-byte buffer) and `png_set_PLTE` sets
    `info_ptr->palette = png_ptr->palette` (768-byte buffer). In both cases, calling `png_free_data` (with
    `PNG_FREE_TRNS` or `PNG_FREE_PLTE`) frees the buffer through `info_ptr` while the corresponding `png_ptr`
    pointer remains dangling. Subsequent row-transform functions dereference and, in some code paths, write to
    the freed memory. A second call to `png_set_tRNS` or `png_set_PLTE` has the same effect, because both
    functions call `png_free_data` internally before reallocating the `info_ptr` buffer. Version 1.6.56 fixes
    the issue. (CVE-2026-33416)

  - Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version
    2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in
    a one byte heap buffer overflow. (CVE-2026-5450)

  - IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an
    attacker-controlled output glob. _parseOutputGlob() wraps the caller-supplied output glob string in double
    quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING.
    A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are
    evaluated as Perl. Arbitrary Perl in the output glob executes at the calling process's privilege.
    (CVE-2026-48962)

  - Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability
    exists in Vim's tag file processing. When resolving a tag, the filename field from the tags file is passed
    through wildcard expansion to resolve environment variables and wildcards. If the filename field contains
    backtick syntax (e.g., `command`), Vim executes the embedded command via the system shell with the full
    privileges of the running user. (CVE-2026-41411)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  # https://portal.nutanix.com/page/documents/security-advisories/release-advisories/details?id=NXSA-AOS-7.5.1.12
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?cd953c75");
  script_set_attribute(attribute:"solution", value:
"Update the Nutanix AOS software to the recommended version. Before upgrading: if this cluster is registered with Prism
Central, ensure that Prism Central has been upgraded first to a compatible version. Refer to the Software Product
Interoperability page on the Nutanix portal.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:P");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-58016");
  script_set_attribute(attribute:"cvss4_score_source", value:"CVE-2026-15308");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2024/04/09");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/08/24");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/08/25");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:nutanix:aos");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("nutanix_collect.nasl");
  script_require_keys("Host/Nutanix/Data/lts", "Host/Nutanix/Data/Service", "Host/Nutanix/Data/Version", "Host/Nutanix/Data/arch");

  exit(0);
}

include('vcf.inc');
include('vcf_extras.inc');

var app_info = vcf::nutanix::get_app_info();

var constraints = [
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.0.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.7', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.8', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.9', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.10', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.11', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.13', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.14', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.15', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.1.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.1.1.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.1.1.2', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.0.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.0.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.0.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.0.7', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.2', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.4', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.7', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.9', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.10', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.12', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.14', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.16', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.5.0.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.5.0.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.5.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.5.1.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.5.1.2', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.5.1.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.5.1.8', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.5.1.10', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.0.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.7', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.8', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.9', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.10', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.11', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.13', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.14', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.0.1.15', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.1.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.1.1.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.1.1.2', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.0.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.0.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.0.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.0.7', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.2', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.4', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.7', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.9', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.10', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.12', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.14', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.3.1.16', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.5.0.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.5.0.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.5.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.5.1.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.5.1.2', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.5.1.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.5.1.8', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' },
  { 'fixed_version' : '7.5.1.12', 'equal' : '7.5.1.10', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.12 or higher.' }
];

vcf::nutanix::check_version_and_report(
    app_info:app_info,
    constraints:constraints,
    severity:SECURITY_HOLE,
    flags:{'xss':TRUE}
);