CVEs published March 27, 2021
2 CVEs were published on March 27, 2021: 0 critical, 0 high.
- Published
- 2
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- github.com/microcosm-cc/bluemonday
- 1
Medium, low and unrated 2
- CVE-2021-29272bluemonday before 1.0.5 allows XSS because certain Go lowercasing converts an uppercase Cyrillic character, defeating a protection mechanismgithub.com/microcosm-cc/bluemonday
- CVE-2021-29271remark42 before 1.6.1 allows XSS, as demonstrated by "Locator: Locator{URL:" followed by an XSS payload.