Lucene search
+L

47 matches found

osv_rustsec
osv_rustsec
•added 2026/10/16 12:00 p.m.•13 views

RUSTSEC-2026-0373 Missing case-insensitive matching for CSS url function

URL filtering, such as relative URLs and URL scheme limits, is not always applied when CSS sanitization is used. When the inner URL is quoted, CSS url"" is matched case-sensitively, when it should be matched case-insensitively. As a result, while url"" gets the intended domain name filtering, URL...

5.9AI score
SaveExploits0References3
Rows per page
Query Builder