If a certain set of MathML tags are enabled, an attacker can inject arbitrary JavaScript code into the user's browser.
The `annotation-xml` tag has slightly different behavior than the other "integration point"
tags in MathML and SVG, but ammonia didn't handle it, so it didn't correctly
strip the namespace-incompatible tags.
This vulnerability only has an effect when the `math` and `annotation-xml` tags
are both enabled, but the `encoding` attribute is disabled, because it relies
on the following sequence of steps:
1. User writes code like `<math><annotation-xml encoding="text/html"><gadget></annotation-xml></math>`.
2. Namespace filtering checks the DOM, and it passes. `<gadget>` is parsed as HTML.
3. Attribute filter strips it down to `<math><annotation-xml><gadget></annotation-xml></math>`. Because the encoding attribute is gone, `<gadget>` is now parsed as MathML.
4. The gadget is written in such a way that it exploits the parsing differences between HTML and MathML.
Additionally, the gadget can only be written using a tag that is parsed as raw text in HTML.
These [elements] are:
* title
* textarea
* xmp
* iframe
* noembed
* noframes
* plaintext
* noscript
* style
* script
Applications that do not explicitly allow any of these tags should not be affected, since none are allowed by default.
[elements]: https://github.com/servo/html5ever/blob/045a0378f2b0f8d4a350793899cf722a2a9b3d11/html5ever/src/tree_builder/rules.rs
### Impact
Low: Requires both MathML and at least one raw-text HTML tag to be enabled, and most websites don't enable either of those.
### Patches
- https://github.com/rust-ammonia/ammonia/pull/245 (released in 4.1.3)
- https://github.com/rust-ammonia/ammonia/pull/244 (released in 4.0.2)
- https://github.com/rust-ammonia/ammonia/pull/243 (released in 3.3.2)
### Workarounds
Call <code>builder.[add_clean_content_tags](https://docs.rs/ammonia/latest/ammonia/struct.Builder.html#method.add_clean_content_tags)("annotation-xml")</code> to remove the annotation-xml element and all of its children, including the XSS gadget.
CVE-2026-57183 is an improper authentication vulnerability in Erudika scoold prior to version 1.69.1. The issue allows an attacker who obtains either of the signing secrets (app_secret_key or para_secret_key) to forge JWT tokens that grant access to privileged administrative API endpoints (/api/config and /api/stats) without requiring a registered API-key jti. This enables reading sensitive configuration and server logs. The vulnerability exists even when the API is disabled via configuration. The flaw is fixed in version 1.69.1.
Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl() method in src/main/java/com/erudika/scoold/utils/HttpUtils.java validates the backto and returnto parameters with Strings.CI.startsWith against the configured server URL. An attacker can supply an absolute URL whose hostname begins with the legitimate hostname, causing URI.resolve() to retain the attacker URL and the prefix check to accept it. A victim who follows the crafted sign-in link can be redirected to an attacker-controlled domain after authentication, enabling phishing and possible credential or token theft. This issue is fixed in version 1.69.1.
CVE-2026-55842 is an origin validation error in the Scoold Q&A platform prior to version 1.69.1. The vulnerability arises from the apiCorsConfiguration() method allowing any origin with credentials, enabling malicious websites to perform authenticated API requests on behalf of logged-in users. This can lead to unauthorized reading of user data and triggering of state-changing operations. The issue is fixed in version 1.69.1.
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to 1.7.4, joserfc.jws.deserialize_json() accepts a JWS General JSON Serialization with an empty signatures array as authenticated. The verify_general_json() loop performs no iterations for the empty array and returns success because no signature check failed, allowing an attacker without a signing key to supply an arbitrary payload that relying applications may treat as authentic. The issue affects the General JSON Serialization path; compact JWS and JWT decoding, Flattened JSON serialization, and JWE JSON processing do not follow this vulnerable path. This issue is fixed in version 1.7.4.
A persistent cross-site scripting (XSS) vulnerability exists in GYM One gym management software versions prior to 1.4.1. The vulnerability occurs because the admin/users/index.php page renders user profile fields (firstname, lastname, email) without proper HTML encoding. An attacker able to store malicious script code in these fields can execute arbitrary scripts in an administrator's browser when they view the user list, potentially compromising administrator session data and privileges. This issue is fixed in version 1.4.1.
GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php concatenates the search_name and search_email GET parameters into both the user-list query and the COUNT query used for pagination without prepared statements. An authenticated administrator can inject SQL through either search field to read data from arbitrary tables, including user information and password hashes. Depending on database permissions, the same injection may also permit filesystem writes. This issue is fixed in version 1.4.1.
Insertion of Sensitive Information Into Sent Data vulnerability in ClikIT Infinite Uploads infinite-uploads allows Retrieve Embedded Sensitive Data.This issue affects Infinite Uploads: from n/a through 3.4.1.
CVE-2026-110362 is a missing authorization vulnerability in Planet studio's PlanetStudio Payment Gateway affecting versions from initial release up to 1.3.3. The flaw allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized actions that impact the integrity of the system. The vulnerability has a medium severity rating with a CVSS score of 5.3. No known exploits are reported in the wild, and no official patch or remediation information is currently provided.
A proxyjacking campaign has compromised at least 143 devices worldwide, including D-Link ShareCenter NAS and Ubiquiti UniFi Video NVR devices, by exploiting known vulnerabilities. The attackers installed the legitimate Pawns.app bandwidth-sharing software without user consent to monetize victims' internet connections through a commercial residential proxy network. The campaign affects devices in 34 countries and involves configuring SSH key authentication for persistent access. Victims risk having their IP addresses associated with suspicious traffic, potentially leading to blocks or allegations of illegal activity.
A resource exhaustion vulnerability exists in reactphp http versions from 1.0.0 up to but not including 1.11.1. The ClientRequestStream::handleData() method appends response-header bytes to an internal buffer without size limits, allowing a remote server to cause unbounded memory growth by sending partial headers without terminating sequences. This can exhaust PHP memory and crash the event loop or worker process. The issue does not affect confidentiality or integrity. It is fixed in version 1.11.1.
CVE-2026-109893 is a stored cross-site scripting (XSS) vulnerability in Brainstorm Force Presto Player affecting versions before 4.5.4. The flaw involves improper neutralization of input during web page generation, which could allow an attacker with low privileges and user interaction to execute malicious scripts. The vulnerability has a medium severity with a CVSS score of 6.5.
Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login with phone number: from n/a through 1.8.77.
Missing Authorization vulnerability in WebberZone Knowledge Base knowledgebase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knowledge Base: from n/a through 3.2.0.
CVE-2026-110375 is a stored cross-site scripting (XSS) vulnerability in the WP Chill Download Monitor plugin affecting versions from initial release up to 5.3.3. It involves improper neutralization of input during web page generation, allowing malicious scripts to be stored and executed in users' browsers. The vulnerability has a CVSS 3.1 score of 6.5, indicating a medium severity level with potential impact on confidentiality, integrity, and availability. No official patch or vendor advisory is provided in the input data, so patch status is not confirmed. The affected versions are all versions prior to 5.3.4. There is no indication of known exploits in the wild or cloud service involvement. Mitigation should be guided by vendor advisories once available.
runwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, containerd-shim-wasmtime-v1 can treat Wasmtime precompiled bytes supplied directly in an OCI image layer as a trusted artifact from the precompile-cache path and deserialize them as native code. An attacker who causes a victim to run a crafted image can bypass WebAssembly validation and execute native code in the shim zygote process, gaining the filesystem, environment, credentials, networking, and Linux syscall access available to the workload container. Downstream shims built with runwasi's containerd-shim-wasm precompile-cache API are also affected if they implement Compiler and trust executable precompiled artifacts from OCI image layers; the 0.6.1 boundary applies specifically to containerd-shim-wasmtime and does not independently certify downstream product releases. The flaw escapes the WASI sandbox to the workload container boundary, but it does not by itself bypass container isolation or provide direct host code execution. This issue is fixed in version 0.6.1.
CVE-2026-55240 is a critical vulnerability in the open source Tianji platform prior to version 1.31.29. It involves improper neutralization of special elements in a template engine, allowing server-side JavaScript execution via the lodash template function. An authenticated workspace administrator can inject code blocks that get executed when an unauthenticated user submits a survey response, leading to potential command execution, secret disclosure, data modification, or service disruption. The issue is fixed in version 1.31.29.
Tianji, an open source analytics and monitoring platform, contains an SQL injection vulnerability in the getDateQuery() function prior to version 1.31.29. The vulnerability arises because the timezone value is interpolated directly into raw SQL without parameter binding, allowing authenticated workspace members, including read-only viewers, to execute arbitrary SQL commands. This can lead to unauthorized disclosure or modification of sensitive data such as credentials, API keys, and tenant information, or cause service disruption. The issue is resolved in version 1.31.29.