SourceHut

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 24, 2026
Last mentionedSep 24, 2026

Timeline

2 articles · newest first

XSS vulnerability in <ansi2html-1.9.4

ansi2html before 1.9.4 converted crafted sr.ht CI log lines into HTML, enabling XSS for viewers.

oss-securitySep 24, 23:02 UTC · Sep 24, 2026Vulnerability1

SourceHut account takeover via build logs (XSS in ansi2html.py)

Stored XSS in SourceHut's ansi2html can run script from CI build logs and enable account takeover.

Lobsters · securitySep 24, 20:38 UTC · Sep 24, 2026Vulnerability1 · 1 read

Appears with

ansi2htmlproduct · 2
SourceHutvendor · 1
builds.sr.htproduct · 1
SourceHutvictim · 1

Entities are extracted by the model from each article. First seen Sep 24, 2026, last mentioned Sep 24, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.