Vulnerabilidades do Naver Lucy-xss-filter
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Naver Lucy-xss-filter: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:naver:lucy-xss-filter
CVE-2026-23769
Média · 6.1
CWE-79 16/01/2026
Cross-site Scripting (XSS) em Naver Lucy-xss-filter
lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset rule files.
CVE-2026-23768
Média · 6.1
CWE-918 16/01/2026
Server-Side Request Forgery (SSRF) em Naver Lucy-xss-filter
lucy-xss-filter before commit 7c1de6d allows an attacker to induce server-side HEAD requests to arbitrary URLs when the ObjectSecurityListener or EmbedSecurityListener option is enabled and embed or object tags are used with a src attribute missing a file extension.