CVE-2026-92973 in ansi2html
Сводка
по MITRE • 17.09.2026
ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the context of pages displaying converted output.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.