https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 02:44:36 +0000 https://vulnerability.circl.lu/vuln/cve-2026-81814 <p><strong>Affected:</strong> flowintel</p> <p>Affected versions of Flowintel render calendar event titles using innerHTML. Because those titles are derived from case titles, a user able to create or modify a case title could store HTML or script-capable content that is later interpreted by the browser when another user views the calendar.</p> <p>The fix changes:</p> <p>titleEl.innerHTML = arg.event.title</p> <p>to:</p> <p>titleEl.textContent = arg.event.title || &#39;&#39;</p> <p>and similarly stops using innerHTML for the static download icon.</p> <p>Version impacted =&gt;3.3.0</p> <p><strong>Affected:</strong> flowintel</p> <p>Affected versions of Flowintel render calendar event titles using innerHTML. Because those titles are derived from case titles, a user able to create or modify a case title could store HTML or script-capable content that is later interpreted by the browser when another user views the calendar.</p> <p>The fix changes:</p> <p>titleEl.innerHTML = arg.event.title</p> <p>to:</p> <p>titleEl.textContent = arg.event.title || &#39;&#39;</p> <p>and similarly stops using innerHTML for the static download icon.</p> <p>Version impacted =&gt;3.3.0</p> https://vulnerability.circl.lu/vuln/cve-2026-81814