getgrav

Records229All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical27CVSS 9.0–10.0

CVSS high123CVSS 7.0–8.9

Exploited now

getgrav records in CISA KEV

No getgrav vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Dom-sanitizer · all components

TI-2023-26805 CVE-2023-49146 · GHSA-2ghm-r75j-pjx2

LOW 28

DOMSanitizer (aka dom-sanitizer) before 1.0.7 allows XSS via an SVG document because of mishandling of comments and greedy regular expressions.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00429 Published 2023-11-22 Fixed in 1.0.7 CWE-79