Linux Distros Unpatched Vulnerability : CVE-2021-29272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bluemonday before 1.0.5 allows XSS because certain Go lowercasing converts an uppercase Cyrillic character, defeating a protection mechanism against the script...

CVE-2021-29272

CVE-2021-29272 affects bluemonday < 1.0.5, where a Go lowercasing bug with Cyrillic uppercase characters defeats a protection against the string "[removed]" and enables XSS. Affected component is the bluemonday HTML sanitizer (Go library). Root cause: improper normalization allowing Cyrillic u...