Lucene search
+L

172 matches found

osv_cleanstart
osv_cleanstart
•added 2026/10/16 12:36 a.m.•11 views

CLEANSTART-2026-KA26751 trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped

CVE-2026-97030 affects multiple packages. A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. See references for individual vulnerability details...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/16 12:00 a.m.•4 views

PT-2026-115887

A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References6
osv_cleanstart
osv_cleanstart
•added 2026/10/15 12:42 a.m.•17 views

CLEANSTART-2026-VW63221 trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped

CVE-2026-97030 affects multiple packages. A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. See references for individual vulnerability details...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/14 12:39 a.m.•10 views

CLEANSTART-2026-YX80273 trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped

CVE-2026-97030 affects multiple packages. A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. See references for individual vulnerability details...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/13 12:37 a.m.•16 views

CLEANSTART-2026-ZX34882 trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped

CVE-2026-97030 affects multiple packages. A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. See references for individual vulnerability details...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/10/11 3:31 p.m.•20 views

Malicious code in defi-yield-calculator (RubyGems)

Source: amazon-inspector ee8b3e50479b61d2ff6e2f5a19de20473cf8fc3c91f99945aff51f112a617192 The gem ships an ext/extconf.rb that base64-decodes an embedded Ruby payload and runs it via eval inside a double-forked, detached, stdio-nulled background process after a 20–40 minute sleep. Execution is...

6AI score
SaveExploits0References3Affected Software1
osv_mal
osv_mal
•added 2026/10/11 1:45 p.m.•17 views

MAL-2026-17783 Malicious code in defi-yield-calculator (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee8b3e50479b61d2ff6e2f5a19de20473cf8fc3c91f99945aff51f112a617192 The gem ships an ext/extconf.rb that base64-decodes an embedded Ruby payload and runs it via eval inside a double-forked, detached, stdio-nulled...

6AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/10/09 12:31 a.m.•11 views

EUVD-2026-95416

A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...

5.9AI score0.00202EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2026/10/08 11:17 p.m.•20 views

DEBIAN-CVE-2026-97030

A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/08 11:17 p.m.•16 views

CVE-2026-97030

A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...

6.1CVSS0.00202EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/10/08 11:17 p.m.•15 views

CVE-2026-97030

A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/08 10:53 p.m.•2 views

CVE-2026-97030 Recognize yield as regexp preceder keyword in html/template

A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...

5.8AI score0.00202EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/08 10:53 p.m.•37 views

CVE-2026-97030 Recognize yield as regexp preceder keyword in html/template

A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...

0.00202EPSS
SaveExploits0References4
Mend
Mend
•added 2026/10/08 10:53 p.m.•11 views

CVE-2026-97030

A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...

4.7CVSS5.9AI score0.00202EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/10/08 10:53 p.m.•13 views

CVE-2026-97030

A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2026/10/08 10:53 p.m.•9 views

CVE-2026-97030

A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0
CVE
CVE
•added 2026/10/08 10:53 p.m.•35 views

CVE-2026-97030

The vulnerability in CVE-2026-97030 involves a trusted template author providing a valid template where the 'yield' keyword was not correctly escaped. This lack of proper escaping allows for potential Cross-Site Scripting (XSS) , as indicated by the CWE-79 classification. The issue has been addre...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•12 views

PT-2026-108320

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A trusted template author may have written a template where the yield keyword is not correctly escaped. This issue involves the improper handling of keyword...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References48
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•4 views

CVE-2026-97030: Undefined Security Weakness

A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...

5.8AI score0.00202EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•3 views

CVE-2026-97030: Improper Neutralization of Input During Web Page Generation

A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References2
Rows per page
Query Builder