Threats tagged 'brew-adr-viewer-cve-2026-59929'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.3%	CVE-2026-59929src/mistune/renderers/html.py blocks only javascript:, vbscript:, file · Prior to 3.3.0, the safe_url filter Medium6.1EPSS 0.3%2026-07-08GCVE DatabaseCVE-2026-59929 CVE-2026-59929 is a medium severity vulnerability in the safe_url filter of the Mistune markdown renderer used by the adr-viewer component of recon-ng. The filter fails to block several legacy and chained URL schemes such as feed:, livescript:, view-source:, jar:, ms-its:, and mk:@MSITStore:, allowing attacker-controlled URLs with these schemes to bypass filtering. This can potentially lead to JavaScript execution in some vulnerable browsers. A patch is available to fix this issue. EPSS 0.3%Report on CVE-2026-59929 Vulnerability #brew-adr-viewer-cve-2026-59929 #homebrew #brew-recon-ng-cve-2026-59929	GCVE Database	2026-07-08

Page 1 of 1