Threats Tagged 'cve-2026-65912'

These are all security issues fixed in the python313-comfyui-frontend-package-1.52.7-1.1 package on the GA media of openSUSE Tumbleweed.

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the grafana13.1 package to address two vulnerabilities identified as CVE-2026-73088 and CVE-2026-73089. The update affects the grafana13.1 version 13.1.3-0.1.1.hum1 for aarch64 and x86_64 architectures. No detailed technical information or CVSS scores are provided for these vulnerabilities. The advisory references the availability of updated RPMs to mitigate these issues.

DOMPurify before 3.3.2 contains a URI validation bypass vulnerability when ADD_ATTR is provided as a predicate function via EXTRA_ELEMENT_HANDLING.attributeCheck. Attackers can supply a predicate that accepts specific attribute and tag combinations to bypass URI-safe validation, allowing unsafe protocols like javascript: to survive sanitization and execute as DOM-based XSS when the link is activated.