Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-92973 1 Ansi2html Project 1 Ansi2html 2026-09-17 6.1 Medium
ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the context of pages displaying converted output.
CVE-2015-9239 1 Ansi2html Project 1 Ansi2html 2024-11-21 7.5 High
ansi2html is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in.