WSO2-2021-1261

WSO2-2021-1261: Multiple Cross-Site Scripting in WSO2 ESB Due to improper output encoding, multiple Cross Site Scripting XSS attacks have been identified in WSO2 ESB. Vendor Disclosure: The vendor's disclosure and fix for this vulnerability can be found here. Why no CVE? Neither me nor the vendor...

Tanium Comply 2.32.x < 2.32.263 / 2.35.x < 2.35.323 / 2.37.x < 2.37.326 Improper Output Sanitization (TAN-2026-069)

The version of Tanium Comply installed on the remote host is 2.32.x prior to 2.32.263, 2.35.x prior to 2.35.323, or 2.37.x prior to 2.37.326. It is, therefore, affected by an improper output sanitization vulnerability as referenced in the TAN-2026-069 advisory. - Tanium addressed an improper outp...

CVE-2026-116647

Tanium addressed an improper output sanitization vulnerability in Comply...

CVE-2026-116649

Tanium addressed an improper output sanitization vulnerability in Enforce...

EUVD-2026-111253

Tanium addressed an improper output sanitization vulnerability in Enforce...

CVE-2026-116649

Tanium addressed an improper output sanitization vulnerability in the Enforce product. The vulnerability is associated with CWE-1236 (Improper Neutralization of Formula Elements in a CSV File). The issue has a CVSS 3.1 score of 7.1 (HIGH) , with a network attack vector and low complexity, requiri...

CVE-2026-116647

Tanium addressed an improper output sanitization vulnerability in the Comply product. The vulnerability is associated with CWE-1236 (Improper Neutralization of Formula Elements in a CSV File). The risk is characterized as HIGH severity (CVSS 3.1 score of 7.1) and requires user interaction . Speci...

EUVD-2026-111252

Tanium addressed an improper output sanitization vulnerability in Comply...

CVE-2026-116649 Tanium addressed an improper output sanitization vulnerability in Enforce.

Tanium addressed an improper output sanitization vulnerability in Enforce...

CVE-2026-116647 Tanium addressed an improper output sanitization vulnerability in Comply.

Tanium addressed an improper output sanitization vulnerability in Comply...

html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals

A flaw was found in the html/template package in Go. This vulnerability allows a remote attacker to conduct cross-site scripting XSS, an attack that executes malicious scripts in a user's browser through improper output escaping. When a JavaScript template literal contains consecutive expressions...

PT-2026-127172

Tanium addressed an improper output sanitization vulnerability in Comply...

Jordan Harband qs improper output handling vulnerability

Versions 6.12.0 through 6.12.5, 6.13.0 through 6.13.4, 6.14.0 through 6.14.3, 6.15.0 through 6.15.4, and 6.16.0 through 6.16.2 of Jordan Harband contain an improper output handling vulnerability. This vulnerability arises because when allowEmptyArrays is set to true, keys in empty arrays are not...

PT-2026-127173

Tanium addressed an improper output sanitization vulnerability in Enforce...

html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals

A flaw was found in the html/template package in Go. This vulnerability allows a remote attacker to conduct cross-site scripting XSS, an attack that executes malicious scripts in a user's browser through improper output escaping. When a JavaScript template literal contains consecutive expressions...

html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals

A flaw was found in the html/template package in Go. This vulnerability allows a remote attacker to conduct cross-site scripting XSS, an attack that executes malicious scripts in a user's browser through improper output escaping. When a JavaScript template literal contains consecutive expressions...

html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals

A flaw was found in the html/template package in Go. This vulnerability allows a remote attacker to conduct cross-site scripting XSS, an attack that executes malicious scripts in a user's browser through improper output escaping. When a JavaScript template literal contains consecutive expressions...

html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals

A flaw was found in the html/template package in Go. This vulnerability allows a remote attacker to conduct cross-site scripting XSS, an attack that executes malicious scripts in a user's browser through improper output escaping. When a JavaScript template literal contains consecutive expressions...

html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals

A flaw was found in the html/template package in Go. This vulnerability allows a remote attacker to conduct cross-site scripting XSS, an attack that executes malicious scripts in a user's browser through improper output escaping. When a JavaScript template literal contains consecutive expressions...

Security Bulletin: IBM Planning Analytics Local is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by security vulnerabilities. These vulnerabilities have been addressed in IBM Planning Analytics Local v2.0 - IBM Planning Analytics Workspace version 2.1.24. Vulnerability Details CVEID:CVE-2026-11541...