2 matches found
HSEC-2024-0004 Hackage package and doc upload stored XSS vulnerability
Hackage package and doc upload stored XSS vulnerability Author: Fraser Tweedale Haskell SRT Executive summary A critical XSS vulnerability affected hackage-server and hackage.haskell.org. HTML and JavaScript files provided in source packages or via the documentation upload facility were served...
9.9CVSS6.4AI score0.00309EPSS
SaveExploits0References3
PT-2026-32986
Hackage package and doc upload stored XSS vulnerability Author: Fraser Tweedale Haskell SRT Executive summary A critical XSS vulnerability affected hackage-server and hackage.haskell.org. HTML and JavaScript files provided in source packages or via the documentation upload facility were served...
9.9CVSS6AI score0.00309EPSS
SaveExploits0References7
20