GitHubNewbie0 odf-kit cross-site scripting vulnerability

In version 0.10.0 through 0.14.2 of the odf-kit for GitHubNewbie, there is a cross-site scripting vulnerability. This occurs because the HTML renderer fails to escape inline CSS style values; attributes such as fo:color are directly concatenated into the style attribute, potentially enabling...

CVE-2026-53693: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting vulnerability existed in MISP BSimVis tag rendering code. Several client-side rendering paths interpolated tag names, collection names, entity identifiers, cluster names, and tag metadata directly into HTML, HTML attributes, inline JavaScript event handlers, and CSS...