AZL-60936 CVE-2025-46394 affecting package busybox 1.36.1-22

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences...

PT-2024-36199 · Google · Google Web Stories

Name of the Vulnerable Software and Affected Versions: Google Web Stories versions n/a through 1.37.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicio...