Threats tagged 'brew-defuddle-cve-2026-61824'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.2	EPSS 0.4%	CVE-2026-61824 · Defuddle vulnerable to XSS via unescaped attribute interpolation in site extractors High8.2EPSS 0.4%2026-08-23GCVE Database Defuddle versions from 0.18.1 up to but not including 0.19.1 contain a Cross-Site Scripting (XSS) vulnerability in the site extractor component. This flaw allows attacker-controlled attribute values to be injected into HTML output without proper escaping, enabling script execution when the content is processed or rendered. The vulnerability has been fixed in version 0.19.1. EPSS 0.4%Report on CVE-2026-61824 Vulnerability #brew-defuddle-cve-2026-61824 #homebrew	GCVE Database	2026-08-23

Page 1 of 1