CVE-2026-92973 in ansi2html
要約
〜によって MITRE • 2026年09月17日
ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the context of pages displaying converted output.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.