Количество 31
Количество 31
CVE-2025-22872
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts).
CVE-2025-22872
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts).
CVE-2025-22872
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts).
CVE-2025-22872
CVE-2025-22872
The tokenizer incorrectly interprets tags with unquoted attribute valu ...
SUSE-SU-2025:02515-1
Security update for kubernetes1.18
SUSE-SU-2025:02383-2
Security update for kubernetes1.26
SUSE-SU-2025:02383-1
Security update for kubernetes1.26
SUSE-SU-2025:02366-2
Security update for docker
SUSE-SU-2025:02366-1
Security update for docker
SUSE-SU-2025:02351-1
Security update for kubernetes1.25
SUSE-SU-2025:02350-2
Security update for kubernetes1.28
SUSE-SU-2025:02350-1
Security update for kubernetes1.28
SUSE-SU-2025:02336-1
Security update for kubernetes1.27
SUSE-SU-2025:02121-1
Security update for helm
SUSE-SU-2025:01945-1
Security update for kubernetes-old
SUSE-SU-2025:01941-1
Security update for kubernetes1.24
SUSE-SU-2025:01940-2
Security update for kubernetes1.23
SUSE-SU-2025:01940-1
Security update for kubernetes1.23
GHSA-vvgc-356p-c3xw
golang.org/x/net vulnerable to Cross-site Scripting
Уязвимостей на страницу
Уязвимость  | CVSS  | EPSS  | Опубликовано  | |
|---|---|---|---|---|
CVE-2025-22872 The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts).  | CVSS3: 6.5  | 0% Низкий | 7 месяцев назад | |
CVE-2025-22872 The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts).  | CVSS3: 6.5  | 0% Низкий | 7 месяцев назад | |
CVE-2025-22872 The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts).  | CVSS3: 6.5  | 0% Низкий | 7 месяцев назад | |
CVSS3: 6.5  | 0% Низкий | 6 месяцев назад | ||
CVE-2025-22872 The tokenizer incorrectly interprets tags with unquoted attribute valu ...  | CVSS3: 6.5  | 0% Низкий | 7 месяцев назад | |
SUSE-SU-2025:02515-1 Security update for kubernetes1.18  | 0% Низкий | 3 месяца назад | ||
SUSE-SU-2025:02383-2 Security update for kubernetes1.26  | 0% Низкий | 3 месяца назад | ||
SUSE-SU-2025:02383-1 Security update for kubernetes1.26  | 0% Низкий | 4 месяца назад | ||
SUSE-SU-2025:02366-2 Security update for docker  | 0% Низкий | 3 месяца назад | ||
SUSE-SU-2025:02366-1 Security update for docker  | 0% Низкий | 4 месяца назад | ||
SUSE-SU-2025:02351-1 Security update for kubernetes1.25  | 0% Низкий | 4 месяца назад | ||
SUSE-SU-2025:02350-2 Security update for kubernetes1.28  | 0% Низкий | 3 месяца назад | ||
SUSE-SU-2025:02350-1 Security update for kubernetes1.28  | 0% Низкий | 4 месяца назад | ||
SUSE-SU-2025:02336-1 Security update for kubernetes1.27  | 0% Низкий | 4 месяца назад | ||
SUSE-SU-2025:02121-1 Security update for helm  | 0% Низкий | 4 месяца назад | ||
SUSE-SU-2025:01945-1 Security update for kubernetes-old  | 0% Низкий | 5 месяцев назад | ||
SUSE-SU-2025:01941-1 Security update for kubernetes1.24  | 0% Низкий | 5 месяцев назад | ||
SUSE-SU-2025:01940-2 Security update for kubernetes1.23  | 0% Низкий | 3 месяца назад | ||
SUSE-SU-2025:01940-1 Security update for kubernetes1.23  | 0% Низкий | 5 месяцев назад | ||
GHSA-vvgc-356p-c3xw golang.org/x/net vulnerable to Cross-site Scripting  | 0% Низкий | 7 месяцев назад | 
Уязвимостей на страницу