Erik-Krogh

**Name of the Vulnerable Software and Affected Versions** sqlparse versions prior to 0.4.4 **Description** The SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue may lead to Denial of Service (DoS). The vulnerability was introduced by commit `e75e358` and has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. **Recommendations** For versions prior to 0.4.4, upgrade to sqlparse 0.4.4 to resolve the issue. As a temporary workaround, consider restricting the use of the SQL parser until a patch is available. There are no known workarounds for this issue.

**Name of the Vulnerable Software and Affected Versions** iziModal versions prior to 1.6.1 **Description** The issue arises when handling untrusted modal titles, allowing an attacker to influence the `title` field and supply arbitrary `html` or `javascript` code. This code will be rendered in the context of a user, potentially leading to cross-site scripting (XSS). **Recommendations** For versions prior to 1.6.1, update to version 1.6.1 to resolve the issue. As a temporary workaround, consider restricting the ability to influence the `title` field when creating an `iziModal` instance to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Baremetrics date range picker versions 1.0.14 and prior **Description** The issue is related to cross-site scripting (XSS) when handling untrusted `placeholder` entries. An attacker who can influence the `placeholder` field when creating a `Calendar` instance can supply arbitrary `html` or `javascript` that will be rendered in the context of a user, leading to XSS. **Recommendations** For versions 1.0.14 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cockpit versions 0.12.2 and prior **Description** Cockpit is a content management system that allows addition of content management functionality to any site. In the affected versions, bad HTML sanitization in `htmleditor.js` may lead to cross-site scripting (XSS) issues. **Recommendations** For Cockpit versions 0.12.2 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider disabling the `htmleditor.js` function until a patch is available. Restrict access to the `htmleditor.js` module to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Microweber versions 1.2.12 and prior **Description** The issue concerns a copy-paste cross-site scripting (XSS) flaw. This type of XSS requires the victim to be tricked into copying a malicious payload into the text editor. **Recommendations** For versions 1.2.12 and prior, update to a version that includes a complete fix for the copy-paste XSS issue, as the fixes attempted in versions 1.2.9 and 1.2.12 are incomplete. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Vditor versions prior to 3.8.7 **Description** Vditor is a browser-side Markdown editor. The issue at hand is a copy-paste cross-site scripting (XSS) problem. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. **Recommendations** For versions prior to 3.8.7, update to version 3.8.7 to resolve the issue. As a temporary workaround, consider restricting the use of the text editor until the patch is applied.

**Name of the Vulnerable Software and Affected Versions** textAngular versions 1.5.16 and prior **Description** The issue is related to copy-paste cross-site scripting (XSS) in textAngular, a text editor for Angular.js. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. **Recommendations** For versions 1.5.16 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** jQuery MiniColors versions prior to 2.3.6 **Description** The issue is related to cross-site scripting when handling untrusted color names. This can be exploited due to the lack of proper input validation in jQuery MiniColors. **Recommendations** For versions prior to 2.3.6, update to version 2.3.6 to resolve the issue. As a temporary workaround, consider validating and sanitizing color names to prevent cross-site scripting attacks.

**Name of the Vulnerable Software and Affected Versions** Mind-elixir versions prior to 0.18.1 **Description** The issue is related to cross-site scripting when handling untrusted menus in Mind-elixir, a free, open source mind map core. **Recommendations** For versions prior to 0.18.1, update to version 0.18.1 to resolve the issue. As a temporary workaround, consider restricting the handling of untrusted menus until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Editor.js versions prior to 2.26.0 **Description** The issue concerns a code injection vulnerability via pasted input in Editor.js, a block-style editor. The `processHTML` method is vulnerable as it passes pasted input into the wrapper's `innerHTML`. This allows for potential code injection attacks. **Recommendations** For versions prior to 2.26.0, update to version 2.26.0 to resolve the issue. As a temporary workaround, consider disabling the `processHTML` method until the patch is applied. Restrict access to pasted input to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Jodit Editor (affected versions not specified) **Description** Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. It is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Toast UI Grid versions prior to 4.21.3 **Description** The issue concerns cross-site scripting attacks that can occur when pasting specially crafted content into editable cells. This can be exploited by attackers to execute malicious scripts. **Recommendations** For versions prior to 4.21.3, update to version 4.21.3 to resolve the issue. At the moment, there are no known workarounds for this issue.

**Name of the Vulnerable Software and Affected Versions** jquery-validation versions prior to 1.19.5 **Description** The issue is related to the incorrect handling of regular expressions in the url2 method of the jQuery Validation Plugin, which can lead to a denial of service when an attacker supplies arbitrary input. This is due to an incomplete fix for a previous issue. The estimated number of potentially affected devices is not specified. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation include the `url2` method, which is vulnerable to regular expression denial of service (ReDoS) attacks when an attacker can supply arbitrary input. **Recommendations** For versions prior to 1.19.5, upgrade to version 1.19.5 to receive a patch. As a temporary workaround, consider restricting access to the `url2` method to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** mechanize versions prior to 0.4.6 **Description** The mechanize library, used for automatically interacting with HTTP web servers, contains a regular expression vulnerable to regular expression denial of service (ReDoS). If a web server responds maliciously, mechanize could crash. **Recommendations** For versions prior to 0.4.6, update to version 0.4.6 to resolve the issue. As a temporary workaround, consider restricting interactions with potentially malicious web servers until the patch is applied.

Name of the Vulnerable Software and Affected Versions: @joeattardi/emoji-button versions prior to 4.6.2 Description: The issue concerns two vectors for XSS attacks: a URL for a custom emoji and an i18n string. In both cases, a crafted value can insert a `script` tag into the page and execute malicious code. Recommendations: For versions prior to 4.6.2, upgrade to version 4.6.2 or later, which properly escapes strings inserted into the HTML document to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Zulip versions prior to 4.7 **Description** Zulip is an open source team chat server that allows organization administrators to configure linkifiers, which automatically create links from messages sent by users, detected via arbitrary regular expressions. Malicious organization administrators could subject the server to a denial-of-service via regular expression complexity attacks by configuring a quadratic-time regular expression in a linkifier and sending messages that exploited it. The regular expression attempted to parse user-provided regexes to verify they were safe from ReDoS, but this was insufficient and itself subject to ReDoS if the organization administrator entered a sufficiently complex invalid regex. **Recommendations** For versions prior to 4.7, upgrade to the just-released Zulip 4.7 or switch to the `main` branch to resolve the issue. As a temporary workaround, consider restricting the ability of organization administrators to configure linkifiers until the upgrade is applied.

**Name of the Vulnerable Software and Affected Versions** jsuites versions prior to 4.9.11 **Description** The issue allows for cross-site scripting (XSS) attacks via clipboard content. If a user can be tricked into copying malicious content and pasting it into the HTML editor, a part of the clipboard content is directly written to `innerHTML`, causing XSS. This enables JavaScript injection. **Recommendations** For versions prior to 4.9.11, update to version 4.9.11 to resolve the issue. As a temporary workaround, consider restricting the use of the HTML editor until the update is applied. Avoid pasting arbitrary content from untrusted sources into the HTML editor to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: ssh2 versions prior to 1.4.0 Description: The issue is a command injection vulnerability that may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This issue only exists on Windows. Recommendations: For versions prior to 1.4.0, update to version 1.4.0 to resolve the issue. As a temporary workaround, consider validating and sanitizing any untrusted input before calling the vulnerable method to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** sqlparse versions 0.4.0 through 0.4.1 **Description** The issue is related to a regular Expression Denial of Service in the sqlparse module for Python. The regular expression may cause exponential backtracking on strings containing many repetitions of `r ` in SQL comments. This affects the formatting feature that removes comments from SQL statements. **Recommendations** For sqlparse versions 0.4.0 and 0.4.1, as a workaround, do not use the `sqlformat.format` function with keyword `strip comments=True` or the `--strip-comments` command line flag when using the `sqlformat` command line tool. For sqlparse versions 0.4.0 and 0.4.1, update to sqlparse 0.4.2 to fix the issue.

**Name of the Vulnerable Software and Affected Versions** Total.js framework versions prior to 3.4.9 **Description** The issue arises when the `utils.set` function is called with user-controlled values, leading to code-injection. This can result in arbitrary code execution. The Total.js framework is a Node.js platform written in pure JavaScript, similar to PHP's Laravel or Python's Django. **Recommendations** For versions prior to 3.4.9, update to version 3.4.9 to resolve the issue. As a temporary workaround, consider restricting the use of the `utils.set` function with user-controlled values until the update is applied.