CVE-2026-103444

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki WikiForum extension allows Stored XSS. This issue affects MediaWiki WikiForum extension: master...

EUVD-2026-90082

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki WikiForum extension allows Stored XSS. This issue affects MediaWiki WikiForum extension: master...

CVE-2026-103443 API permits session-seeded javascript URL XSS

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki Collection Book extension allows XSS Targeting Non-Script Elements. This issue affects MediaWiki Collection Book extension: 1.46, 1.45, and 1.43...

PT-2026-103624

Name of the Vulnerable Software and Affected Versions MediaWiki MediaSearch extension versions 1.43, 1.45, and 1.46 Description Improper neutralization of script-related HTML tags in a web page leads to a Cross-Site Scripting XSS issue. XSS is a flaw that allows an attacker to inject malicious...

CVE-2026-103444: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki WikiForum extension allows Stored XSS. This issue affects MediaWiki WikiForum extension: master...

PT-2026-103493

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki Wikistories extension allows Cross-Site Scripting XSS. This issue affects MediaWiki Wikistories extension: 1.46, 1.45, and 1.43...

PT-2026-103466

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki Page Forms extension allows Stored XSS. This issue affects MediaWiki Page Forms extension: 1.46, 1.45, and 1.43...

PT-2026-103623

Name of the Vulnerable Software and Affected Versions MediaWiki CommonsMetadata extension versions 1.43, 1.45, and 1.46 Description Improper neutralization of script-related HTML tags in a web page leads to a Cross-Site Scripting XSS issue. XSS is a flaw that allows an attacker to inject maliciou...

PT-2026-103494

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki Wikbase extension allows Cross-Site Scripting XSS. This issue affects MediaWiki Wikbase extension: 1.46, 1.45, and 1.43...

Linux Distros Unpatched Vulnerability : CVE-2026-97711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. From 7.1.1 until 7.1.2, function values...

CVE-2026-97711

A flaw was found in serialize-javascript. This vulnerability allows a remote attacker to conduct Cross-Site Scripting XSS attacks by supplying crafted function code containing unescaped script-closing tags. When the serialized function is embedded within an HTML script element, the unescaped tag...

CVE-2026-100241 Private change tags exposed to anonymous users via revision-tags-change events

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Extension allows Excavation. This issue affects Mediawiki - EventBus Extension: 1.47.0-alpha...

CVE-2026-100241 Private change tags exposed to anonymous users via revision-tags-change events

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Extension allows Excavation. This issue affects Mediawiki - EventBus Extension: 1.47.0-alpha...

CVE-2026-100241

The Wikimedia Foundation Mediawiki - EventBus Extension (version 1.47.0-alpha ) is vulnerable to an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. Specifically, private change tags are exposed to anonymous users via revision-tags-change events . This flaw allows for the...

DEBIAN-CVE-2026-97711

Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. From 7.1.1 until 7.1.2, function values serialized by serialize-javascript are not fully protected against script-closing tags in attacker-influenced function source because...

CVE-2026-97711

Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. From 7.1.1 until 7.1.2, function values serialized by serialize-javascript are not fully protected against script-closing tags in attacker-influenced function source because...

UBUNTU-CVE-2026-97711

Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. From 7.1.1 until 7.1.2, function values serialized by serialize-javascript are not fully protected against script-closing tags in attacker-influenced function source because...

CVE-2026-97711

The serialize-javascript library is vulnerable to cross-site scripting (XSS) in versions 7.1.1 through 7.1.2 . The root cause is that the SCRIPT_CLOSE_REGEXP can consume a second closing tag within a single match, failing to fully protect serialized function values against script-closing tags. If...

PT-2026-102671

Name of the Vulnerable Software and Affected Versions serialize-javascript versions 7.1.1 through 7.1.1 Description serialize-javascript converts JavaScript values into a JSON superset that includes functions and regular expressions. A flaw exists where function values are not fully protected...

vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

A command injection vulnerability in Vim's C omni-completion script allows an attacker to execute arbitrary commands if a user is tricked into opening a maliciously crafted tags file and manually invoking the autocomplete feature...