#ansi2html

0 stories this week · 0 this month · 3 in 6 months · mostly security

Stories per day · 30 days

3 stories, newest first · one card per story

An oss-security reply points to a Hacker News thread on XSS in ansi2html 1.9.4.

ansi2html before 1.9.4 converted crafted sr.ht CI log lines into HTML, enabling XSS for viewers.

Stored XSS in SourceHut's ansi2html can run script from CI build logs and enable account takeover.

Stories tagged #ansi2html