CVE Feed

    Dashboard / CVE / CVE-2026-92973

    CVE-2026-92973

    ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the context of pages displaying converted output.

    Published:Sep 17, 2026
    Last Modified:Sep 17, 2026
    EPS:Sep 17, 2026
    EPSS Score:
    CVSS Score:6.1

    Affected Products

    Vendor
    Ansi2html Project
    Product
    Ansi2html
    Vendor
    Pycontribs
    Product
    Ansi2html

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High