EUVD-2021-21933

Malware in sbrugna...

CVE-2025-58054

Discourse is an open-source community discussion platform. Versions 3.5.0 and below are vulnerable to XSS attacks through parsing and rendering of chat channel titles and chat thread titles via the quote message functionality when using the rich text editor. This issue is fixed in version 3.5.1...

EUVD-2024-23429

Malicious code in bioql PyPI...

EUVD-2025-26713

Malicious code in bioql PyPI...

EUVD-2021-27631

Malicious code in bioql PyPI...

EUVD-2024-2127

Malicious code in bioql PyPI...

EUVD-2023-56139

Malicious code in bioql PyPI...

EUVD-2025-8774

Malicious code in bioql PyPI...

EUVD-2025-29230

Malicious code in bioql PyPI...

EUVD-2025-29222

Malicious code in bioql PyPI...

EUVD-2023-46824

Malicious code in bioql PyPI...

EUVD-2025-31808

Malicious code in bioql PyPI...

EUVD-2025-32065

Malicious code in bioql PyPI...

EUVD-2025-3599

Malicious code in bioql PyPI...

EUVD-2025-14745

Malicious code in bioql PyPI...

CVE-2025-43826

Stored cross-site scripting XSS vulnerabilities in Web Content translation in Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allow remote...

CVE-2025-58054

Discourse is an open-source community discussion platform. Versions 3.5.0 and below are vulnerable to XSS attacks through parsing and rendering of chat channel titles and chat thread titles via the quote message functionality when using the rich text editor. This issue is fixed in version 3.5.1...

CVE-2025-58054

CVE-2025-58054 refers to a Discourse XSS vulnerability present in versions ≤ 3.5.0, triggered by parsing/rendering chat channel titles and chat thread titles via the quote message feature in the rich text editor. The issue is resolved in version 3.5.1. Affected product: Discourse open-source plat...

CVE-2025-58054 Discourse is vulnerable to XSS when quoting chat messages

Discourse is an open-source community discussion platform. Versions 3.5.0 and below are vulnerable to XSS attacks through parsing and rendering of chat channel titles and chat thread titles via the quote message functionality when using the rich text editor. This issue is fixed in version 3.5.1...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the rich text field in web content articles. An attacker can execute arbitrary web scripts or inject malicious HTML by submitting crafted input to this field. Details Cross-site scripting or XSS is a code...