GHSA-QP7P-654G-CW7P Hono has CSS Declaration Injection via Style Object Values in JSX SSR

Summary The JSX renderer escapes style attribute object values for HTML but not for CSS. Untrusted input in a style object value or property name can therefore inject additional CSS declarations into the rendered style attribute. The impact is limited to CSS and does not allow JavaScript executio...

EUVD-2004-0762

Malware in sbrugna...

Code Injection

gitlab is vulnerable to Code Injection. The vulnerability is due to there is no sanitization of KaTeX directives, allowing them to escape their intended container. This allows an attacker to hijack some links and buttons on the GitLab UI to a malicious page...

PT-2023-26838

Name of the Vulnerable Software and Affected Versions GitLab versions 8.15 through 16.2.7 GitLab versions 16.3 through 16.3.4 GitLab versions 16.4 through 16.4.0 Description An issue has been discovered in GitLab, allowing some links and buttons on the GitLab UI to be hijacked to a malicious page...

CVE-2004-0764

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language XUL files...