38 matches found
CVE-2026-92973
ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scriptin...
python313-ansi2html-1.9.5-1.1 on GA media (moderate)
python313-ansi2html-1.9.5-1.1 on GA media Announcement ID: openSUSE-SU-2026:11815-1 Rating: moderate Cross-References: CVE-2026-92973 CVSS scores: CVE-2026-92973 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2026-92973 SUSE : 5.3...
SUSE CVE-2026-92973
ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the...
OPENSUSE-SU-2026:11815-1 python313-ansi2html-1.9.5-1.1 on GA media
These are all security issues fixed in the python313-ansi2html-1.9.5-1.1 package on the GA media of openSUSE Tumbleweed...
Linux Distros Unpatched Vulnerability : CVE-2026-92973
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets...
CVE-2026-92973
A flaw was found in ansi2html. This cross-site scripting XSS vulnerability exists in the OSC 8 hyperlink handling, where the component fails to properly validate or escape URL targets. A remote attacker, by controlling ANSI text input, can inject malicious JavaScript schemes or manipulate href...
DEBIAN-CVE-2026-92973
ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the...
CVE-2026-92973
ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the...
CVE-2026-92973 ansi2html 1.7.0a0 through 1.9.3 Cross-Site Scripting via OSC 8
ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the...
CVE-2026-92973 ansi2html 1.7.0a0 through 1.9.3 Cross-Site Scripting via OSC 8
ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the...
EUVD-2026-81582
ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the...
CVE-2026-92973 ansi2html 1.7.0a0 through 1.9.3 Cross-Site Scripting via OSC 8
ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the...
CVE-2026-92973
ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the...
CVE-2026-92973
ansi2html (a Python library by pycontribs ) versions 1.7.0a0 through 1.9.3 contain a cross-site scripting (XSS) vulnerability in OSC 8 hyperlink handling . The root cause is the failure to validate or escape URL targets, allowing attackers who control ANSI text input to inject javascript: schemes...
alcali (3006.3.0), an-website (>=22.5.13, <=26.9.0) +16 more potentially affected by CVE-2026-92973 via ansi2html (>=1.7.0, <=1.9.3)
ansi2html PYPI version =1.7.0, =22.5.13, =1.1.0, =0.2.0, =8.6.10, =2.9.0, =0.1.0, =0.0.1, =1.6.0, =3.5.69, =1.0.2, =1.1.1, =1.0.1, =1.2.17 and more Source cves: CVE-2026-92973 Source advisory: MEND:CVE-2026-92973...
CVE-2026-92973
ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the...
CVE-2026-92973: Improper Neutralization of Input During Web Page Generation
ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the...
PT-2026-94338
Name of the Vulnerable Software and Affected Versions ansi2html versions 1.7.0a0 through 1.9.3 Description An issue exists in the handling of OSC 8 hyperlinks where URL targets are not properly validated or escaped. This allows attackers who can control ANSI text input to inject javascript: schem...
EUVD-2020-0958
Malware in sbrugna...
SUSE: Security Advisory (SUSE-SU-2022:2831-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...