Threats Tagged 'ghsa-97jw-64cj-jc58'
View all threats tagged with 'ghsa-97jw-64cj-jc58'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-97jw-64cj-jc58'
Click on any threat for detailed analysis and mitigation recommendations
GHSA-97jw-64cj-jc58: ViewComponent: around_render HTML-Safety BypassCVE-2026-54498 0 ViewComponent versions >=4.0.0 and <4.12.0 contain a vulnerability where the around_render method can return HTML-unsafe strings that bypass normal escaping, leading to cross-site scripting (XSS) risks. This issue is amplified in collection rendering where outputs are joined and marked as html_safe, causing raw unsafe content to be trusted and rendered directly. The vulnerability arises because around_render return values are not passed through the usual HTML escaping mechanisms applied to call method outputs. This can allow attacker-controlled data to be rendered as raw HTML if used improperly in around_render, especially in downstream applications that use around_render for wrapping or instrumentation. Join the discussion | GCVE Database | 07/15/2026, 22:51:04 UTC Added: 07/16/2026, 10:35:48 UTC |
Showing 1 to 1 of 1 result