EUVD-2026-20992

Unhead has a hasDangerousProtocol bypass via leading-zero padded HTML entities in useHeadSafe...

CVE-2026-39315

Unhead is a document head and template manager. Prior to 2.1.13, useHeadSafe is the composable that Nuxt's own documentation explicitly recommends for rendering user-supplied content in safely. Internally, the hasDangerousProtocol function in packages/unhead/src/plugins/safe.ts decodes HTML...

Akaunting 跨站脚本漏洞

Akaunting is an application from Akaunting that provides all the tools you need to manage your money online. A security vulnerability exists in Akaunting version 2.1.12 and earlier. The issue has been fixed in version 2.1.13...