3 matches found
EUVD-2026-20992
Unhead has a hasDangerousProtocol bypass via leading-zero padded HTML entities in useHeadSafe...
6.1CVSS5.9AI score0.00285EPSS
SaveExploits1References4
CVE-2026-39315
Unhead is a document head and template manager. Prior to 2.1.13, useHeadSafe is the composable that Nuxt's own documentation explicitly recommends for rendering user-supplied content in safely. Internally, the hasDangerousProtocol function in packages/unhead/src/plugins/safe.ts decodes HTML...
6.1CVSS0.00285EPSS
SaveExploits1References3
PT-2026-31676
Unhead is a document head and template manager. Prior to 2.1.13, useHeadSafe is the composable that Nuxt's own documentation explicitly recommends for rendering user-supplied content in safely. Internally, the hasDangerousProtocol function in packages/unhead/src/plugins/safe.ts decodes HTML...
6.1CVSS5.9AI score0.00285EPSS
SaveExploits1References7
20