Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Riassunto tecnico
justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters (angle brackets) in text nodes when converting a parsed document to Markdown via to_markdown(). While a small set of Markdown metacharacters are escaped, characters such as < and > are preserved, so untrusted input that is safe in to_html() — including entity-decoded text (e.g. <script>) or text from RCDATA/RAWTEXT-parsed elements like
, <textarea>, <noscript>, and <plaintext> — can </p>
</div>
<div class="cy-section">
<h2>Impatto</h2>
<p>Vulnerabilità con punteggio CVSS 9.8 (CRITICAL). Sfruttata attivamente: No.</p>
</div>
<div class="cy-section">
<h2>Sistemi vulnerabili</h2>
<p><strong>Vendor:</strong> N/A<br><strong>Prodotti:</strong> N/A</p>
</div>
<div class="cy-section">
<h2>Mitigazioni</h2>
<p>Applicare le patch del vendor appena disponibili. Monitorare gli advisory ufficiali.</p>
</div>
<div class="cy-sources">
<h2 style="font-size:1rem;font-weight:700;margin-bottom:12px">Fonti ufficiali</h2>
<p><a href="https://nvd.nist.gov/vuln/detail/CVE-2026-8445" target="_blank" rel="noopener">🔗 NVD NIST — CVE-2026-8445</a></p>
<ul><li><a href="https://github.com/EmilStenstrom/justhtml/security/advisories/GHSA-3rcm-vjrc-p45j" target="_blank" rel="noopener noreferrer">https://github.com/EmilStenstrom/justhtml/security/advisories/GHSA-3rcm-vjrc-p45</a></li><li><a href="https://www.vulncheck.com/advisories/justhtml-before-sanitizer-bypass-via-markdown" target="_blank" rel="noopener noreferrer">https://www.vulncheck.com/advisories/justhtml-before-sanitizer-bypass-via-markdo</a></li></ul>
</div>
<div style="margin-top:40px;padding:24px;background:#f0fdf4;border-radius:12px;border:1px solid #bbf7d0">
<p style="font-size:.9rem;color:#334155">Vuoi approfondire la cybersecurity?
<a href="/ethical-hacker-libro.html" style="color:#16a34a;font-weight:700">Scopri il libro "Ethical Hacker per Tutti"</a>
oppure <a href="/ripetizioni-informatica-online.html" style="color:#16a34a;font-weight:700">prenota una lezione online</a>.</p>
</div>
</div>
</div>
</section>
<footer>
<div class="footer-links">
<a href="/index.html">Home</a>
<a href="index.html">Cybersecurity</a>
<a href="/ripetizioni-informatica-online.html">Ripetizioni</a>
<a href="/contatti.html">Contatti</a>
</div>
<p style="font-size:.8rem">© 2026 Massimo Mezzina · P.IVA 08666370724</p>
</footer>
<script>
function toggleMenu(){var m=document.getElementById('mobileMenu');m.classList.toggle('open');}
document.querySelectorAll('.mobile-menu a').forEach(function(a){
a.addEventListener('click',function(){document.getElementById('mobileMenu').classList.remove('open');});
});
</script>
</body>
</html>