1247 matches found
Awesome-RAG-Security
Awesome-RAG-Security News Initial release: This repository records papers on RAG security following the SLOT taxonomy from our survey. A Survey of Secure Retrieval-Augmented Generation Yuming Xu 1, Mingtao Zhang 1, Zhuohan Ge 1, Haoyang Li 1, Nicole Hu 1, Yongqi Zhang 2, Zhiyuan Wen 1, Jason Chen...
hdwebmobile-booking-appointments
HDWebmobile Booking & Appointments Sell bookable services and appointments through WooCommerce, with a per-slot capacity that can never be oversold. WordPress.org: https://wordpress.org/plugins/hdwebmobile-booking-appointments/ Requires: WordPress 6.9+, WooCommerce, PHP 7.4+ License: GPLv2 or lat...
CVE-2026-126362
Astro is a web framework for content-driven websites. From 5.7.3 until 9.1.2, the @astrojs/svelte renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. Request-controlled slot names containing a quote could terminate the attribute and inject...
CVE-2026-126363
Astro is a web framework for content-driven websites. From 0.2.0 until 7.1.2, the @astrojs/solid-js renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. A request-controlled slot name containing a quote could terminate the attribute and...
CVE-2026-126363: withastro astro: Astro is a web framework for content-driven websites
Astro is a web framework for content-driven websites. From 0.2.0 until 7.1.2, the @astrojs/solid-js renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. A request-controlled slot name containing a quote could terminate the attribute and...
CVE-2026-126362: withastro astro: Astro is a web framework for content-driven websites
Astro is a web framework for content-driven websites. From 5.7.3 until 9.1.2, the @astrojs/svelte renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. Request-controlled slot names containing a quote could terminate the attribute and inject...
Astro: Reflected XSS via unescaped slot names in @astrojs/solid-js
Summary The @astrojs/solid-js renderer wraps named slot content passed to Solid components in an element, and writes the slot name into its name attribute without HTML escaping. A slot name containing " could end the attribute and inject arbitrary HTML into the page. For example, a page that take...
GHSA-JMV2-QGXF-F995 Astro: Reflected XSS via unescaped slot names in @astrojs/solid-js
Summary The @astrojs/solid-js renderer wraps named slot content passed to Solid components in an element, and writes the slot name into its name attribute without HTML escaping. A slot name containing " could end the attribute and inject arbitrary HTML into the page. For example, a page that take...
GHSA-F4J9-CRRJ-867Q Astro: Reflected XSS via unescaped slot names in @astrojs/svelte
Summary The @astrojs/svelte renderer wraps slotted content passed to Svelte components in an element, and writes the slot name into its name attribute without HTML escaping. A slot name containing " could end the attribute and inject arbitrary HTML into the page. For example, a page that takes a...
Astro: Reflected XSS via unescaped slot names in @astrojs/svelte
Summary The @astrojs/svelte renderer wraps slotted content passed to Svelte components in an element, and writes the slot name into its name attribute without HTML escaping. A slot name containing " could end the attribute and inject arbitrary HTML into the page. For example, a page that takes a...
EUVD-2026-124745
Astro is a web framework for content-driven websites. From 0.2.0 until 7.1.2, the @astrojs/solid-js renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. A request-controlled slot name containing a quote could terminate the attribute and...
CVE-2026-126363
Astro is a web framework for content-driven websites. From 0.2.0 until 7.1.2, the @astrojs/solid-js renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. A request-controlled slot name containing a quote could terminate the attribute and...
CVE-2026-126363 Astro: Reflected XSS via unescaped slot names in @astrojs/solid-js
Astro is a web framework for content-driven websites. From 0.2.0 until 7.1.2, the @astrojs/solid-js renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. A request-controlled slot name containing a quote could terminate the attribute and...
CVE-2026-126363
The @astrojs/solid-js renderer (versions 0.2.0 to 7.1.1 ) is vulnerable to Reflected Cross-Site Scripting (XSS) because it inserts named slots into the name attribute of an element without proper HTML escaping . An attacker can provide a request-controlled slot name containing a quote (e.g., via...
CVE-2026-126363 Astro: Reflected XSS via unescaped slot names in @astrojs/solid-js
Astro is a web framework for content-driven websites. From 0.2.0 until 7.1.2, the @astrojs/solid-js renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. A request-controlled slot name containing a quote could terminate the attribute and...
CVE-2026-126362
The @astrojs/svelte renderer (versions >= 5.7.3 and <= 9.1.1 ) is vulnerable to Reflected Cross-Site Scripting (XSS) because it inserts named slots into the name attribute of an wrapper without proper HTML escaping. An attacker can provide a request-controlled input (e.g., via a query para...
CVE-2026-126362 Astro: Reflected XSS via unescaped slot names in @astrojs/svelte
Astro is a web framework for content-driven websites. From 5.7.3 until 9.1.2, the @astrojs/svelte renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. Request-controlled slot names containing a quote could terminate the attribute and inject...
CVE-2026-126362 Astro: Reflected XSS via unescaped slot names in @astrojs/svelte
Astro is a web framework for content-driven websites. From 5.7.3 until 9.1.2, the @astrojs/svelte renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. Request-controlled slot names containing a quote could terminate the attribute and inject...
EUVD-2026-124743
Astro is a web framework for content-driven websites. From 5.7.3 until 9.1.2, the @astrojs/svelte renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. Request-controlled slot names containing a quote could terminate the attribute and inject...
CVE-2026-126362
Astro is a web framework for content-driven websites. From 5.7.3 until 9.1.2, the @astrojs/svelte renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. Request-controlled slot names containing a quote could terminate the attribute and inject...