https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:10:13 +0000 https://db.gcve.eu/vuln/cve-2023-23627 <p><strong>Affected:</strong> rgrove sanitize</p> <p>Sanitize is an allowlist-based HTML and CSS sanitizer. Versions 5.0.0 and later, prior to 6.0.1, are vulnerable to Cross-site Scripting. When Sanitize is configured with a custom allowlist that allows `noscript` elements, attackers are able to include arbitrary HTML, resulting in XSS (cross-site scripting) or other undesired behavior when that HTML is rendered in a browser. The default configurations do not allow `noscript` elements and are not vulnerable. This issue only affects users who are using a custom config that adds `noscript` to the element allowlist. This issue has been patched in version 6.0.1. Users who are unable to upgrade can prevent this issue by using one of Sanitize&#39;s default configs or by ensuring that their custom config does not include `noscript` in the element allowlist.</p> <p><strong>Affected:</strong> rgrove sanitize</p> <p>Sanitize is an allowlist-based HTML and CSS sanitizer. Versions 5.0.0 and later, prior to 6.0.1, are vulnerable to Cross-site Scripting. When Sanitize is configured with a custom allowlist that allows `noscript` elements, attackers are able to include arbitrary HTML, resulting in XSS (cross-site scripting) or other undesired behavior when that HTML is rendered in a browser. The default configurations do not allow `noscript` elements and are not vulnerable. This issue only affects users who are using a custom config that adds `noscript` to the element allowlist. This issue has been patched in version 6.0.1. Users who are unable to upgrade can prevent this issue by using one of Sanitize&#39;s default configs or by ensuring that their custom config does not include `noscript` in the element allowlist.</p> https://db.gcve.eu/vuln/cve-2023-23627 https://db.gcve.eu/vuln/usn-6748-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: ruby-sanitize, Ubuntu:22.04:LTS: ruby-sanitize</p> <p>It was discovered that Sanitize incorrectly handled noscript elements under certain circumstances. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-23627)</p> <p>It was discovered that Sanitize incorrectly handled style elements under certain circumstances. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. (CVE-2023-36823)</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: ruby-sanitize, Ubuntu:22.04:LTS: ruby-sanitize</p> <p>It was discovered that Sanitize incorrectly handled noscript elements under certain circumstances. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-23627)</p> <p>It was discovered that Sanitize incorrectly handled style elements under certain circumstances. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. (CVE-2023-36823)</p> https://db.gcve.eu/vuln/usn-6748-1