https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 01:19:11 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-73159 <p>Affected versions of cti-transmute allow a tag&#39;s icon value to be stored and later interpolated into HTML through Vue&#39;s v-html. The helper mapIcon() previously constructed an HTML string directly from the icon value:</p> <p>&lt;i class=&#34;fas fa-${name}&#34;&gt;&lt;/i&gt;</p> <p>Because the icon is user-supplied, a crafted value could break out of the intended markup and inject attacker-controlled HTML. When the affected tag was later rendered, including on the administrative triage interface, the payload could execute in the viewer&#39;s browser.</p> <p>The patch mitigates the issue at multiple layers: v-html is replaced with Vue :class binding, mapIcon() now returns only a constrained FontAwesome class string, and the backend validates icons against the FontAwesome catalogue or a strict [a-z0-9-]{1,40} slug pattern before storing them.</p> <p>Affected versions of cti-transmute allow a tag&#39;s icon value to be stored and later interpolated into HTML through Vue&#39;s v-html. The helper mapIcon() previously constructed an HTML string directly from the icon value:</p> <p>&lt;i class=&#34;fas fa-${name}&#34;&gt;&lt;/i&gt;</p> <p>Because the icon is user-supplied, a crafted value could break out of the intended markup and inject attacker-controlled HTML. When the affected tag was later rendered, including on the administrative triage interface, the payload could execute in the viewer&#39;s browser.</p> <p>The patch mitigates the issue at multiple layers: v-html is replaced with Vue :class binding, mapIcon() now returns only a constrained FontAwesome class string, and the backend validates icons against the FontAwesome catalogue or a strict [a-z0-9-]{1,40} slug pattern before storing them.</p> https://db.gcve.eu/vuln/fkie_cve-2026-73159 https://db.gcve.eu/vuln/gcve-1-2026-20164 <p><strong>Affected:</strong> MISP cti-transmute</p> <p>Affected versions of cti-transmute allow a tag&#39;s icon value to be stored and later interpolated into HTML through Vue&#39;s v-html. The helper mapIcon() previously constructed an HTML string directly from the icon value:</p> <p>&lt;i class=&#34;fas fa-${name}&#34;&gt;&lt;/i&gt;</p> <p>Because the icon is user-supplied, a crafted value could break out of the intended markup and inject attacker-controlled HTML. When the affected tag was later rendered, including on the administrative triage interface, the payload could execute in the viewer&#39;s browser.</p> <p>The patch mitigates the issue at multiple layers: v-html is replaced with Vue :class binding, mapIcon() now returns only a constrained FontAwesome class string, and the backend validates icons against the FontAwesome catalogue or a strict [a-z0-9-]{1,40} slug pattern before storing them.</p> <p><strong>Affected:</strong> MISP cti-transmute</p> <p>Affected versions of cti-transmute allow a tag&#39;s icon value to be stored and later interpolated into HTML through Vue&#39;s v-html. The helper mapIcon() previously constructed an HTML string directly from the icon value:</p> <p>&lt;i class=&#34;fas fa-${name}&#34;&gt;&lt;/i&gt;</p> <p>Because the icon is user-supplied, a crafted value could break out of the intended markup and inject attacker-controlled HTML. When the affected tag was later rendered, including on the administrative triage interface, the payload could execute in the viewer&#39;s browser.</p> <p>The patch mitigates the issue at multiple layers: v-html is replaced with Vue :class binding, mapIcon() now returns only a constrained FontAwesome class string, and the backend validates icons against the FontAwesome catalogue or a strict [a-z0-9-]{1,40} slug pattern before storing them.</p> https://db.gcve.eu/vuln/gcve-1-2026-20164 https://db.gcve.eu/vuln/ghsa-3vx2-8r8r-pf7r <p>Affected versions of cti-transmute allow a tag&#39;s icon value to be stored and later interpolated into HTML through Vue&#39;s v-html. The helper mapIcon() previously constructed an HTML string directly from the icon value:</p> <p>&lt;i class=&#34;fas fa-${name}&#34;&gt;&lt;/i&gt;</p> <p>Because the icon is user-supplied, a crafted value could break out of the intended markup and inject attacker-controlled HTML. When the affected tag was later rendered, including on the administrative triage interface, the payload could execute in the viewer&#39;s browser.</p> <p>The patch mitigates the issue at multiple layers: v-html is replaced with Vue :class binding, mapIcon() now returns only a constrained FontAwesome class string, and the backend validates icons against the FontAwesome catalogue or a strict [a-z0-9-]{1,40} slug pattern before storing them.</p> <p>Affected versions of cti-transmute allow a tag&#39;s icon value to be stored and later interpolated into HTML through Vue&#39;s v-html. The helper mapIcon() previously constructed an HTML string directly from the icon value:</p> <p>&lt;i class=&#34;fas fa-${name}&#34;&gt;&lt;/i&gt;</p> <p>Because the icon is user-supplied, a crafted value could break out of the intended markup and inject attacker-controlled HTML. When the affected tag was later rendered, including on the administrative triage interface, the payload could execute in the viewer&#39;s browser.</p> <p>The patch mitigates the issue at multiple layers: v-html is replaced with Vue :class binding, mapIcon() now returns only a constrained FontAwesome class string, and the backend validates icons against the FontAwesome catalogue or a strict [a-z0-9-]{1,40} slug pattern before storing them.</p> https://db.gcve.eu/vuln/ghsa-3vx2-8r8r-pf7r