GHSA-QP7P-654G-CW7P Hono has CSS Declaration Injection via Style Object Values in JSX SSR

Summary The JSX renderer escapes style attribute object values for HTML but not for CSS. Untrusted input in a style object value or property name can therefore inject additional CSS declarations into the rendered style attribute. The impact is limited to CSS and does not allow JavaScript executio...

EUVD-2004-0762

Malware in sbrugna...

Code Injection

gitlab is vulnerable to Code Injection. The vulnerability is due to there is no sanitization of KaTeX directives, allowing them to escape their intended container. This allows an attacker to hijack some links and buttons on the GitLab UI to a malicious page...

CVE-2004-0764

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language XUL files...