Vulnerabilities

TI-2023-10160 CVE-2023-24539 · GHSA-3q6h-q44p-xw88

Improper sanitization of CSS values in html/template

LOW 34

Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01037 Published 2023-05-11 Partial fix · 1.19.9, 1.20.4 CWE-94

TI-2023-10161 CVE-2023-24540 · GHSA-7qhm-5mxq-x7vp

MEDIUM 52

Not all valid JavaScript whitespace characters are considered to be whitespace.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0156 Published 2023-05-11 Partial fix · 1.19.9, 1.20.4 CWE-77

TI-2023-13780 CVE-2023-29400 · GHSA-c9hr-fvm9-7c49

LOW 34

Templates containing actions in unquoted HTML attributes (e.g.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01037 Published 2023-05-11 Partial fix · 1.19.9, 1.20.4 CWE-94