https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 12:38:51 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-73161 <p>Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight() function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted &lt;mark&gt; tags without first escaping the original content. Because the resulting value is used by an HTML-rendering sink, malicious markup contained in conversion data could be interpreted as HTML rather than displayed as text.</p> <p>The fix introduces a shared highlightMatches() helper that first converts special characters such as &lt;, &gt;, &amp;, and quotes into HTML entities. Only after escaping does the code insert the application-controlled &lt;mark&gt; element used for search highlighting.</p> <p>Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight() function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted &lt;mark&gt; tags without first escaping the original content. Because the resulting value is used by an HTML-rendering sink, malicious markup contained in conversion data could be interpreted as HTML rather than displayed as text.</p> <p>The fix introduces a shared highlightMatches() helper that first converts special characters such as &lt;, &gt;, &amp;, and quotes into HTML entities. Only after escaping does the code insert the application-controlled &lt;mark&gt; element used for search highlighting.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-73161 https://vulnerability.circl.lu/vuln/gcve-1-2026-20177 <p><strong>Affected:</strong> MISP cti-transmute</p> <p>Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight() function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted &lt;mark&gt; tags without first escaping the original content. Because the resulting value is used by an HTML-rendering sink, malicious markup contained in conversion data could be interpreted as HTML rather than displayed as text.</p> <p>The fix introduces a shared highlightMatches() helper that first converts special characters such as &lt;, &gt;, &amp;, and quotes into HTML entities. Only after escaping does the code insert the application-controlled &lt;mark&gt; element used for search highlighting.</p> <p><strong>Affected:</strong> MISP cti-transmute</p> <p>Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight() function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted &lt;mark&gt; tags without first escaping the original content. Because the resulting value is used by an HTML-rendering sink, malicious markup contained in conversion data could be interpreted as HTML rather than displayed as text.</p> <p>The fix introduces a shared highlightMatches() helper that first converts special characters such as &lt;, &gt;, &amp;, and quotes into HTML entities. Only after escaping does the code insert the application-controlled &lt;mark&gt; element used for search highlighting.</p> https://vulnerability.circl.lu/vuln/gcve-1-2026-20177 https://vulnerability.circl.lu/vuln/ghsa-9p42-c923-p9c9 <p>Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight() function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted &lt;mark&gt; tags without first escaping the original content. Because the resulting value is used by an HTML-rendering sink, malicious markup contained in conversion data could be interpreted as HTML rather than displayed as text.</p> <p>The fix introduces a shared highlightMatches() helper that first converts special characters such as &lt;, &gt;, &amp;, and quotes into HTML entities. Only after escaping does the code insert the application-controlled &lt;mark&gt; element used for search highlighting.</p> <p>Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight() function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted &lt;mark&gt; tags without first escaping the original content. Because the resulting value is used by an HTML-rendering sink, malicious markup contained in conversion data could be interpreted as HTML rather than displayed as text.</p> <p>The fix introduces a shared highlightMatches() helper that first converts special characters such as &lt;, &gt;, &amp;, and quotes into HTML entities. Only after escaping does the code insert the application-controlled &lt;mark&gt; element used for search highlighting.</p> https://vulnerability.circl.lu/vuln/ghsa-9p42-c923-p9c9