knowledge-repo (>=0.9.2, <=0.9.3), render50 (>=7.0.2, <=8.0.2) potentially affected by CVE-2026-106443 via weasyprint (54.3.0)

weasyprint PYPI version 54.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - knowledge-repo =0.9.2, =7.0.2, =8.0.2 Source cves: CVE-2026-106443 Source advisory: OSV:GHSA-R543-Q48M-4C9J...

knowledge-repo (>=0.9.2, <=0.9.3), render50 (>=7.0.2, <=8.0.2) potentially affected by CVE-2026-55073 via weasyprint (54.3.0)

weasyprint PYPI version 54.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - knowledge-repo =0.9.2, =7.0.2, =8.0.2 Source cves: CVE-2026-55073 Source advisory: OSV:PYSEC-2026-3940...

knowledge-repo (>=0.9.2, <=0.9.3), render50 (>=7.0.2, <=8.0.2) potentially affected by CVE-2026-55073 via weasyprint (54.3.0)

weasyprint PYPI version 54.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - knowledge-repo =0.9.2, =7.0.2, =8.0.2 Source cves: CVE-2026-55073 Source advisory: OSV:GHSA-JF6Q-CHMF-3H3V...

knowledge-repo (>=0.9.2, <=0.9.3), render50 (>=7.0.2, <=8.0.2) potentially affected by CVE-2026-49452 via weasyprint (54.3.0)

weasyprint PYPI version 54.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - knowledge-repo =0.9.2, =7.0.2, =8.0.2 Source cves: CVE-2026-49452 Source advisory: OSV:PYSEC-2026-3412...

knowledge-repo (>=0.9.2, <=0.9.3), render50 (>=7.0.2, <=8.0.2) potentially affected by CVE-2025-68616 via weasyprint (54.3.0)

weasyprint PYPI version 54.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - knowledge-repo =0.9.2, =7.0.2, =8.0.2 Source cves: CVE-2025-68616 Source advisory: OSV:PYSEC-2026-2034...

knowledge-repo (>=0.9.2, <=0.9.3), render50 (>=7.0.2, <=8.0.2) potentially affected by CVE-2026-49452 via weasyprint (54.3.0)

weasyprint PYPI version 54.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - knowledge-repo =0.9.2, =7.0.2, =8.0.2 Source cves: CVE-2026-49452 Source advisory: OSV:GHSA-JHHC-3HCP-QHM5...

knowledge-repo (>=0.9.2, <=0.9.3), render50 (>=7.0.2, <=8.0.2) potentially affected by CVE-2025-68616 via weasyprint (54.3.0)

weasyprint PYPI version 54.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - knowledge-repo =0.9.2, =7.0.2, =8.0.2 Source cves: CVE-2025-68616 Source advisory: OSV:GHSA-983W-RHVV-GWMV...

EUVD-2018-0084

Malware in sbrugna...

Cross-site Scripting (XSS)

knowledge-repo is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper user input validation in the post comments functionality. This allows an attacker to inject arbitrary web scripts or HTML content into the application, potentially leading to cross-site scripting XSS...

Airbnb Knowledge Repo XSS In Comments

Cross-site scripting XSS vulnerability in Airbnb Knowledge Repo prior to 0.9.0 allows remote attackers to inject arbitrary web scripts or HTML via the post comments functionality, as demonstrated by the post/posts/newreport.kp URI...

GHSA-XMW7-848P-P95W Airbnb Knowledge Repo XSS In Comments

Cross-site scripting XSS vulnerability in Airbnb Knowledge Repo prior to 0.9.0 allows remote attackers to inject arbitrary web scripts or HTML via the post comments functionality, as demonstrated by the post/posts/newreport.kp URI...

Airbnb Knowledge Repo Cross-Site Scripting Vulnerability

Airbnb Knowledge Repo is a suite of knowledge sharing platforms. The platform supports features such as data storage and utility management. A cross-site scripting vulnerability exists in Airbnb Knowledge Repo version 0.7.4. A remote attacker can exploit this vulnerability to inject arbitrary web...

PYSEC-2018-116

Cross-site scripting XSS vulnerability in Airbnb Knowledge Repo 0.7.4 allows remote attackers to inject arbitrary web scripts or HTML via the post comments functionality, as demonstrated by the post/posts/newreport.kp URI...

CVE-2018-12104

Cross-site scripting XSS vulnerability in Airbnb Knowledge Repo 0.7.4 allows remote attackers to inject arbitrary web scripts or HTML via the post comments functionality, as demonstrated by the post/posts/newreport.kp URI...

PYSEC-2018-116

Cross-site scripting XSS vulnerability in Airbnb Knowledge Repo 0.7.4 allows remote attackers to inject arbitrary web scripts or HTML via the post comments functionality, as demonstrated by the post/posts/newreport.kp URI...

Cross site scripting

Cross-site scripting XSS vulnerability in Airbnb Knowledge Repo 0.7.4 allows remote attackers to inject arbitrary web scripts or HTML via the post comments functionality, as demonstrated by the post/posts/newreport.kp URI...

CVE-2018-12104

Cross-site scripting XSS vulnerability in Airbnb Knowledge Repo 0.7.4 allows remote attackers to inject arbitrary web scripts or HTML via the post comments functionality, as demonstrated by the post/posts/newreport.kp URI...

CVE-2018-12104

Airbnb Knowledge Repo 0.7.4 is reported vulnerable to Cross-site Scripting (XSS) via the post comments functionality (post/posts/new_report.kp). The root cause is improper input validation in the comments feature, as cited by Veracode (improper user input validation) and OSV entries noting the is...

PT-2018-11016

Name of the Vulnerable Software and Affected Versions Airbnb Knowledge Repo versions 0.7.4 through 0.8.x Airbnb Knowledge Repo versions prior to 0.9.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web scripts or HTML via the post comments functionality, ...

CVE-2018-12104: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Airbnb Knowledge Repo 0.7.4 allows remote attackers to inject arbitrary web scripts or HTML via the post comments functionality, as demonstrated by the post/posts/newreport.kp URI...