https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:51:14 +0000 https://db.gcve.eu/vuln/brew-mkdocs-material-cve-2026-73295 <p><strong>Affected:</strong> Homebrew: mkdocs-material</p> <p>### Impact</p> <p>Material for MkDocs 7.2.0 through 9.7.6 contains a DOM-based cross-site scripting vulnerability in the optional `search.suggest` feature. A crafted `q` URL parameter could execute JavaScript in the documentation site&#39;s origin after user interaction.</p> <p>### Patches</p> <p>The issue is fixed in Material for MkDocs 9.7.7. Users should upgrade to 9.7.7 or later.</p> <p>### Workarounds</p> <p>Sites unable to upgrade should disable the `search.suggest` feature.</p> <p><strong>Affected:</strong> Homebrew: mkdocs-material</p> <p>### Impact</p> <p>Material for MkDocs 7.2.0 through 9.7.6 contains a DOM-based cross-site scripting vulnerability in the optional `search.suggest` feature. A crafted `q` URL parameter could execute JavaScript in the documentation site&#39;s origin after user interaction.</p> <p>### Patches</p> <p>The issue is fixed in Material for MkDocs 9.7.7. Users should upgrade to 9.7.7 or later.</p> <p>### Workarounds</p> <p>Sites unable to upgrade should disable the `search.suggest` feature.</p> https://db.gcve.eu/vuln/brew-mkdocs-material-cve-2026-73295 https://db.gcve.eu/vuln/cve-2026-73295 <p><strong>Affected:</strong> squidfunk mkdocs-material</p> <p>Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest feature that allows a crafted q URL parameter to execute JavaScript in a documentation site&#39;s origin after user interaction. This issue is fixed in version 9.7.7.</p> <p><strong>Affected:</strong> squidfunk mkdocs-material</p> <p>Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest feature that allows a crafted q URL parameter to execute JavaScript in a documentation site&#39;s origin after user interaction. This issue is fixed in version 9.7.7.</p> https://db.gcve.eu/vuln/cve-2026-73295 https://db.gcve.eu/vuln/ghsa-xvg9-69gf-fjrf <p><strong>Affected:</strong> PyPI: mkdocs-material</p> <p>### Impact</p> <p>Material for MkDocs 7.2.0 through 9.7.6 contains a DOM-based cross-site scripting vulnerability in the optional `search.suggest` feature. A crafted `q` URL parameter could execute JavaScript in the documentation site&#39;s origin after user interaction.</p> <p>### Patches</p> <p>The issue is fixed in Material for MkDocs 9.7.7. Users should upgrade to 9.7.7 or later.</p> <p>### Workarounds</p> <p>Sites unable to upgrade should disable the `search.suggest` feature.</p> <p><strong>Affected:</strong> PyPI: mkdocs-material</p> <p>### Impact</p> <p>Material for MkDocs 7.2.0 through 9.7.6 contains a DOM-based cross-site scripting vulnerability in the optional `search.suggest` feature. A crafted `q` URL parameter could execute JavaScript in the documentation site&#39;s origin after user interaction.</p> <p>### Patches</p> <p>The issue is fixed in Material for MkDocs 9.7.7. Users should upgrade to 9.7.7 or later.</p> <p>### Workarounds</p> <p>Sites unable to upgrade should disable the `search.suggest` feature.</p> https://db.gcve.eu/vuln/ghsa-xvg9-69gf-fjrf