#html

1 stories this week · 2 this month · 3 in 6 months · mostly security

Stories per day · 30 days

3 stories, newest first · one card per story

An oss-security post says HTML::Tags output from the Perl module leaves single quotes unescaped.

The html package change targets quadratic work while coalescing adjacent text nodes in addText.

GBHackersSep 15, 2026high

Stored XSS in Telegram Desktop HTML chat exports (CVSS 8.2) could let attacker-controlled inline keyboard buttons steal full chat histories.

Stories tagged #html