CVE-2026-55847

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the ansi.js helper at allure-generator/src/main/javascript/helpers/ansi.js passes attacker-influenced statusMessage and statusTrace values through AnsiToHtml without HTML escaping and wraps...

CVE-2026-55847 Allure: Stored XSS via unescaped ANSI helper in Allure report status message/trace rendering

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the ansi.js helper at allure-generator/src/main/javascript/helpers/ansi.js passes attacker-influenced statusMessage and statusTrace values through AnsiToHtml without HTML escaping and wraps...

EUVD-2026-77688

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the ansi.js helper at allure-generator/src/main/javascript/helpers/ansi.js passes attacker-influenced statusMessage and statusTrace values through AnsiToHtml without HTML escaping and wraps...

CVE-2026-55847 Allure: Stored XSS via unescaped ANSI helper in Allure report status message/trace rendering

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the ansi.js helper at allure-generator/src/main/javascript/helpers/ansi.js passes attacker-influenced statusMessage and statusTrace values through AnsiToHtml without HTML escaping and wraps...

CVE-2026-55847

Allure 2 (a multi-language test reporting tool) is vulnerable to stored XSS in the ansi.js Handlebars helper within allure-generator. Prior to 2.39.0 , attacker-controlled statusMessage and statusTrace values (sourced from JUnit XML, TRX, xUnit, xctest, or Allure1/2 plugins) are passed through th...

CVE-2026-55847: Improper Neutralization of Input During Web Page Generation

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the ansi.js helper at allure-generator/src/main/javascript/helpers/ansi.js passes attacker-influenced statusMessage and statusTrace values through AnsiToHtml without HTML escaping and wraps...

CVE-2021-33106

Integer overflow in the Safestring library maintained by IntelR may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33106

Integer overflow in the Safestring library maintained by IntelR may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33106

Integer overflow in the Safestring library maintained by IntelR may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33106

Integer overflow in the Safestring library maintained by IntelR may allow an authenticated user to potentially enable escalation of privilege via local access...

Integer overflow

Integer overflow in the Safestring library maintained by IntelR may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33106

CVE-2021-33106 is an Intel Safestring library vulnerability caused by an integer overflow. It could allow an authenticated local user to escalate privileges. Affected component: Safestring library maintained by Intel. Root cause: integer overflow. Impact: local privilege escalation with high seve...

CVE-2021-33106

Integer overflow in the Safestring library maintained by IntelR may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33106: Integer Overflow or Wraparound

Integer overflow in the Safestring library maintained by IntelR may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Safestring Library 输入验证错误漏洞

Intel Safestring Library is a security-based C library from Intel Corporation, USA. An input validation error vulnerability exists in Intel Safestring Library due to an integer overflow. A local user can pass specially processed data to the application, trigger an integer overflow, and execute...

Safestring Library Advisory

Summary: A potential security vulnerability in the Safestring library maintained by Intel® may allow escalation of privilege. Intel is releasing a library update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-33106 Description: Integer overflow in the Safestring...

SUSE-SU-2017:1443-1 Security update for several openstack-components

This update for openstack-ceilometer, -cinder, -dashboard, -glance, -heat, -keystone, -manila, -magnum and -novaopenstack-keystone provides the latest code from OpenStack Newton. - nova: Add release note that legacy notification exception contexts appearing in ERROR level logs may include sensiti...

Ember.js XSS Vulnerability with User-Supplied JSON

By default, Ember will escape any values in Handlebars templates that use double curlies value. Developers can specifically opt out of this escaping behavior by passing an instance of SafeString rather than a raw string, which tells Ember that it should not escape the string because the developer...