Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 17:03:57 +0000 CVE-2026-108722 — open-computer-use through commit 610bac8 Stored XSS via log.html Session Log https://db.gcve.eu/vuln/cve-2026-108722 <p><strong>Affected:</strong> e2b-dev open-computer-use</p> <p>open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.write_log_file in os_computer_use/logging.py, which writes transcript text into log.html without HTML escaping. Attackers controlling sandbox content, such as web pages or files appearing in run_command output, can inject script that runs when operators open the log, exfiltrating transcript contents.</p> <p><strong>Affected:</strong> e2b-dev open-computer-use</p> <p>open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.write_log_file in os_computer_use/logging.py, which writes transcript text into log.html without HTML escaping. Attackers controlling sandbox content, such as web pages or files appearing in run_command output, can inject script that runs when operators open the log, exfiltrating transcript contents.</p> https://db.gcve.eu/vuln/cve-2026-108722