Approved changes feed: RSS · Atom
cpe:2.3:a:ansi2html_project:ansi2html:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ansi2Html Project (15e54d27-0150-5882-87ce-14a3ce4a8860) |
|---|---|
| Product | Ansi2Html (0d238db4-4eb6-5a53-9e5b-99ffe6fbb66a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/agnoster/ansi2html |
purl2cpe | 2026-06-01 10:18:08.004486 |
pkg:npm/ansi2html |
purl2cpe | 2026-06-01 10:18:08.004489 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-92973 |
vulnerable | 2026-10-13 12:28:53.364932 |
ansi2html 1.7.0a0 through 1.9.3 Cross-Site Scripting via OSC 8
MEDIUM (6.1)
ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the context of pages displaying converted output.
Published: 2026-09-17T13:43:17.365Z
Updated: 2026-09-17T15:38:41.098Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.