CLSA-2026-1772583210 TuxCare security update for knockout (2 CVEs)

TuxCare rebuilt knockout to address 2 CVEs. Fixed in 2.3.0-tuxcare.2...

The vulnerability of the Knockout.js library, related to the lack of protective measures for website structures, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Knockout.js library is related to the lack of protective measures for website structures. Exploiting this vulnerability can allow a remote attacker to perform cross-site scripting attacks...

UBUNTU-CVE-2019-14862

There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...

knockout: Cross-site Scripting (XSS) attacks due to not escaping the name attribute.

There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...