Algernon engine and themes vulnerable to Cross-site Scripting

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-26131 · ADVISORY
• xyproto/algernon · PACKAGE
• xyproto/algernon · WEB
• xyproto/algernon · WEB
• xyproto/algernon · WEB
• security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMXYPROTOALGERNONENGINE-3312111 · WEB
• security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMXYPROTOALGERNONTHEMES-3312112 · WEB
• xyproto/algernon · Broken Link
• xyproto/algernon · Broken Link
• xyproto/algernon

Lỗ hổng khác của github.com/xyproto/algernon

• CVE-2026-52792CAO 8.7Algernon is a small self-contained pure-Go web server. Prior to 1.17.9, Algernon on Windows selects a file handler in engine/handlers.go by …
• GO-2026-5300Algernon: Auto-refresh SSE event server binds to all interfaces with Access-Control-Allow-Origin: * and no authentication in github.com/xypr…
• CVE-2026-48126CAO 8.2Algernon is a small self-contained pure-Go web server. Prior to 1.17.8, when algernon is started with --domain (or --letsencrypt, which sile…
• CVE-2026-46431TRUNG BÌNH 4.3Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, the SSE event server's Access-Control-Allow-Origin response header w…
• CVE-2026-46430TRUNG BÌNH 4.3Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, the SSE event server bound to 0.0.0.0:5553 on Linux/macOS by default…