RUSTSEC-2026-0348 Brotli certificate decompression can allocate up to 1 GiB before authentication

The built-in Brotli certificate decompressor enabled by the non-default brotli crate feature bounded the size of the decompressed output, but accepted a peer-selected history window. Brotli's large-window extension was enabled, so a five-byte header could cause an allocation of 1 GiB. A peer can...

SUSE CVE-2012-1410

Multiple cross-site scripting XSS vulnerabilities in the History Window implementation in Kadu 0.9.0 through 0.11.0 allow remote attackers to inject arbitrary web script or HTML via a crafted 1 SMS message, 2 presence message, or 3 status description...

CVE-2012-1410

Multiple cross-site scripting XSS vulnerabilities in the History Window implementation in Kadu 0.9.0 through 0.11.0 allow remote attackers to inject arbitrary web script or HTML via a crafted 1 SMS message, 2 presence message, or 3 status description...

CVE-2012-1410

Multiple cross-site scripting XSS vulnerabilities in the History Window implementation in Kadu 0.9.0 through 0.11.0 allow remote attackers to inject arbitrary web script or HTML via a crafted 1 SMS message, 2 presence message, or 3 status description...

PT-2012-3239

Name of the Vulnerable Software and Affected Versions Kadu versions 0.9.0 through 0.11.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the History Window implementation. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via...

CVE-2012-1410: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the History Window implementation in Kadu 0.9.0 through 0.11.0 allow remote attackers to inject arbitrary web script or HTML via a crafted 1 SMS message, 2 presence message, or 3 status description...