216 matches found
CVE-2026-27142
CVE-2026-27142 is disclosed as an issue where URLs inserted into the content attribute of HTML meta tags were not escaped, potentially enabling XSS when the meta tag has http-equiv="refresh". Public advisories (ALAS2-2026-3310, ALAS2-2026-3313, ALAS2-2026-3311, ALAS2023-2026-1771, etc.) link this...
Cross-site Scripting (XSS)
Overview std/html/template is a Go standard library package std/html/template Affected versions of this package are vulnerable to Cross-site Scripting XSS. Go Vulnerability Report:Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the met...
GO-2026-4603 URLs in meta content attribute actions are not escaped in html/template
Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actio...
EUVD-2017-17751
Malware in sbrugna...
EUVD-2021-1350
Malware in sbrugna...
EUVD-2024-49447
Malicious code in bioql PyPI...
EUVD-2024-34096
Malicious code in bioql PyPI...
EUVD-2024-49329
Malicious code in bioql PyPI...
EUVD-2024-53995
Malicious code in bioql PyPI...
EUVD-2023-24080
Malicious code in bioql PyPI...
EUVD-2024-49793
Malicious code in bioql PyPI...
EUVD-2024-50631
Malicious code in bioql PyPI...
EUVD-2024-34292
Malicious code in bioql PyPI...
EUVD-2024-49552
Malicious code in bioql PyPI...
EUVD-2024-49384
Malicious code in bioql PyPI...
EUVD-2024-50051
Malicious code in bioql PyPI...
EUVD-2025-20516
Malicious code in bioql PyPI...
EUVD-2024-33770
Malicious code in bioql PyPI...