6 matches found
CVE-2026-108722
open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.writelogfile in oscomputeruse/logging.py, which writes transcript text into log.html without HTML escaping. Attackers controlling sandbox content, such as web pages or files appearing in...
CVE-2026-108722
The open-computer-use project (specifically through commit 610bac8) is vulnerable to a stored cross-site scripting (XSS) flaw. The issue resides in the Logger.write_log_file function within os_computer_use/logging.py, which fails to perform HTML escaping when writing transcript text into log.html...
EUVD-2026-96888
open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.writelogfile in oscomputeruse/logging.py, which writes transcript text into log.html without HTML escaping. Attackers controlling sandbox content, such as web pages or files appearing in...
CVE-2026-108722 open-computer-use through commit 610bac8 Stored XSS via log.html Session Log
open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.writelogfile in oscomputeruse/logging.py, which writes transcript text into log.html without HTML escaping. Attackers controlling sandbox content, such as web pages or files appearing in...
CVE-2026-108722: Improper Neutralization of Input During Web Page Generation
open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.writelogfile in oscomputeruse/logging.py, which writes transcript text into log.html without HTML escaping. Attackers controlling sandbox content, such as web pages or files appearing in...
Insertion of Sensitive Information into Log File
Overview foreman-mcp-server is a MCP server for Foreman host management and infrastructure automation Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the sanitizeheaders method in logging.py, which used a denylist approach to redact sensiti...