CVE-2026-92973

Published: Set 17, 2026 Last Modified: Set 17, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,3
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: passive
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM 6,1
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: changed
Confidentiality: low
Integrity: low
Availability: none

Description

AI Translation Available

ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the context of pages displaying converted output.

79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Stable
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control Confidentiality Integrity Availability
Potential Impacts:
Bypass Protection Mechanism Read Application Data Execute Unauthorized Code Or Commands
Applicable Platforms
Technologies: AI/ML, Web Based, Web Server
Likelihood of Exploit: High
View CWE Details
https://github.com/pycontribs/ansi2html
https://github.com/pycontribs/ansi2html
https://github.com/pycontribs/ansi2html/blob/v1.9.3/src/ans…
https://github.com/pycontribs/ansi2html/blob/v1.9.3/src/ansi2html/converter.py#…
https://github.com/pycontribs/ansi2html/commit/89d1c231c60a…
https://github.com/pycontribs/ansi2html/commit/89d1c231c60ac52005f3b21bbba551c7…
https://www.vulncheck.com/advisories/ansi2html-1.7-0a0-thro…
https://www.vulncheck.com/advisories/ansi2html-1.7-0a0-through-1.9.3-cross-site…