6248 matches found
CKEditor 跨站脚本漏洞
CKEditor is an open-source enterprise-level WYSIWYG editor developed by CKEditor. Versions of CKEditor prior to 47.6.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from the General HTML Support feature, which allowed cross-site scripting, potentially enabling the...
OPENSUSE-SU-2026:10289-1 freetype2-devel-2.14.2-1.1 on GA media
These are all security issues fixed in the freetype2-devel-2.14.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10292-1 python311-Django-5.2.12-1.1 on GA media
These are all security issues fixed in the python311-Django-5.2.12-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10290-1 heroic-games-launcher-2.20.1-2.1 on GA media
These are all security issues fixed in the heroic-games-launcher-2.20.1-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10291-1 libsoup-2_4-1-2.74.3-18.1 on GA media
These are all security issues fixed in the libsoup-24-1-2.74.3-18.1 package on the GA media of openSUSE Tumbleweed...
GHSA-JRQM-VMQC-GM93 CKEditor 5 has Cross-site Scripting (XSS) in the HTML Support package
Impact A Cross-Site Scripting XSS vulnerability has been discovered in the General HTML Support feature. This vulnerability could be triggered by inserting specially crafted markup, leading to unauthorized JavaScript code execution, if the editor instance used an unsafe General HTML Support...
CKEditor 5 has Cross-site Scripting (XSS) in the HTML Support package
Impact A Cross-Site Scripting XSS vulnerability has been discovered in the General HTML Support feature. This vulnerability could be triggered by inserting specially crafted markup, leading to unauthorized JavaScript code execution, if the editor instance used an unsafe General HTML Support...
Cross-site Scripting (XSS)
Overview @ckeditor/ckeditor5-html-support is a HTML Support feature for CKEditor 5. Affected versions of this package are vulnerable to Cross-site Scripting XSS via its unsafe htmlSupport configuration. An attacker can execute unauthorized JavaScript in the editor context by inserting specially...
K000160222: Linux kernel vulnerability CVE-2022-50356
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: net: sched: sfb: fix null pointer access issue when sfbinit fails When the default qdisc is sfb, if the qdisc of devqueue fails to be inited during mqprioinit, sfbreset is invoked to clear resources...
PT-2026-23086
Name of the Vulnerable Software and Affected Versions CKEditor 5 versions prior to 47.6.0 Description CKEditor 5, a JavaScript rich-text editor, contains a cross-site scripting XSS issue within the General HTML Support feature. This issue arises from the insertion of specially crafted markup,...
OPENSUSE-SU-2026:10285-1 python311-pillow-heif-1.3.0-1.1 on GA media
These are all security issues fixed in the python311-pillow-heif-1.3.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10279-1 c3p0-0.12.0-1.1 on GA media
These are all security issues fixed in the c3p0-0.12.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10288-1 libblkid-devel-2.41.3-4.1 on GA media
These are all security issues fixed in the libblkid-devel-2.41.3-4.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10283-1 python313-Django6-6.0.3-1.1 on GA media
These are all security issues fixed in the python313-Django6-6.0.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10281-1 mchange-commons-0.4.0-1.1 on GA media
These are all security issues fixed in the mchange-commons-0.4.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10277-1 python311-pypdf-6.7.5-1.1 on GA media
These are all security issues fixed in the python311-pypdf-6.7.5-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10276-1 libsoup-3_0-0-3.6.6-2.1 on GA media
These are all security issues fixed in the libsoup-30-0-3.6.6-2.1 package on the GA media of openSUSE Tumbleweed...
A Systematic Study of LLM-Based Architectures for Automated Patching
Large language models LLMs have shown promise for automated patching, but their effectiveness depends strongly on how they are integrated into patching systems. While prior work explores prompting strategies and individual agent designs, the field lacks a systematic comparison of patching...