Vulnerabilities

TI-2026-28305 CVE-2026-39315 · GHSA-95h2-gj7x-gx9w

Unhead has a hasDangerousProtocol() bypass via leading-zero padded HTML entities in useHeadSafe()

MEDIUM 60

Unhead is a document head and template manager.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00296 Published 2026-04-09 Fixed in 2.1.13 CWE-184

TI-2026-24425 CVE-2026-31873 · GHSA-5339-hvwr-7582

HIGH 66

Unhead is a document head and template manager.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00268 Published 2026-03-12 Fixed in 2.1.11 CWE-79

TI-2026-24412 CVE-2026-31860 · GHSA-g5xx-pwrp-g3fv

MEDIUM 57

Unhead is a document head and template manager.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00292 Published 2026-03-12 Fixed in 2.1.11 CWE-79