UBUNTU-CVE-2026-55847

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the ansi.js helper at allure-generator/src/main/javascript/helpers/ansi.js passes attacker-influenced statusMessage and statusTrace values through AnsiToHtml without HTML escaping and wraps...

CVE-2026-55847

creationtimestamp| type| source ---|---|--- 2026-06-16 13:42:25+00:00| published-proof-of-concept| https://github.com/allure-framework/allure2/security/advisories/GHSA-gx93-m64w-5m6h 2026-09-14 18:42:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7sny77l36bfpy...