EUVD-2024-26188

Malicious code in bioql PyPI...

CVE-2024-29154

danielmiessler fabric through 1.3.0 allows installer/client/gui/static/js/index.js XSS because of innerHTML mishandling, such as in htmlToPlainText...

CVE-2024-29154: Improper Neutralization of Input During Web Page Generation

danielmiessler fabric through 1.3.0 allows installer/client/gui/static/js/index.js XSS because of innerHTML mishandling, such as in htmlToPlainText...

CVE-2024-29154

Fabric (danielmiessler) up to version 1.3.0 is affected by an XSS flaw in installer/client/gui/static/js/index.js due to innerHTML mishandling in htmlToPlainText. Impact described as cross-site scripting; no exploit details are provided in the documents. A PT-2024-22771 advisory suggests mitigati...