CVE-2026-92973 in ansi2html

Riassunto

di MITRE • 17/09/2026

ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the context of pages displaying converted output.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsabile: VulnCheck
• Prenotare: 17/09/2026
• Divulgazione: 17/09/2026
• Moderazione: accettato
• Voce: VDB-406461
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 6.1 (CNA)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-92973
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-92973
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-92973/