Privilege escalation in the OnGres StackGres operator lets a low-privilege, database-owning tenant elevate to administrator privileges, breaking the multi-tenant isolation model of this Kubernetes-based PostgreSQL platform. The CVSS 9.9 rating with a scope change (S:C) reflects that an authenticated tenant confined to their own database can cross a trust boundary to gain full administrative control. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV; the only public reference is a GitLab work item tracking the flaw.
Heap out-of-bounds write in DBD::Pg 3.21.0, the Perl DBI driver for PostgreSQL, lets an attacker corrupt heap memory by passing special floating-point literals (NaN, Inf, +Inf, -Inf, Infinity, and signed variants) to the quote_float() routine, reachable through the common $dbh->quote(value, DBI::SQL_NUMERIC) path. The bug is a 2-byte overwrite (a single quote plus a NULL terminator) introduced by the 3.21.0 quote.c rewrite and fixed in 3.21.1. No public exploit identified at time of analysis; EPSS is low (0.23%, 14th percentile) and CISA SSVC records exploitation status as none.
Unauthenticated privilege escalation to administrator in the RestrictMate WordPress plugin before 1.3.0 lets any remote visitor abuse the account-registration flow, which fails to validate the user role submitted during signup, to create a brand-new administrator account and receive a logged-in admin session - resulting in full site takeover. Rated CVSS 9.8 with a fully remote, no-interaction, no-privilege vector; a vendor patch (1.3.0) exists and CISA's SSVC framework flags it as automatable with total technical impact. There is no public exploit identified at time of analysis and it is not on CISA KEV, and EPSS is low at 0.19% (8th percentile).
Sanitizer bypass in the justhtml Python library (versions <= 1.11.0) allows attacker-controlled input to survive as raw HTML in the output of to_markdown(), enabling cross-site scripting when that Markdown is later rendered. Although to_html() safely neutralizes the same input, the Markdown serializer escapes only a handful of Markdown metacharacters and leaves angle brackets (< and >) intact, so entity-decoded text (e.g. <script>) or text from RCDATA/RAWTEXT elements like <title>, <textarea>, <noscript>, and <plaintext> is emitted verbatim. Publicly available exploit code exists (a proof-of-concept is published in the vendor advisory), and the flaw is fixed in 1.12.0.
Cross-site scripting via HTML sanitization bypass affects justhtml (a Python HTML parsing/sanitization library by EmilStenstrom) in all versions up to and including 1.15.0, letting active content such as script or style survive sanitization. The flaws mostly hit advanced usage - programmatic DOM input, reused or mutated policy objects, and custom policies that preserve SVG/MathML - rather than the default JustHTML(..., sanitize=True) path, though process-wide mutation of exported default policies can weaken sanitization broadly. Reported by VulnCheck and fixed in 1.16.0; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Sanitization bypass in justhtml (a Python HTML/Markdown sanitization library) before 1.15.0 lets attacker-controlled input reintroduce active HTML and JavaScript, resulting in cross-site scripting in consuming web applications. The flaws span URL-sanitization helpers, HTML serialization, Markdown passthrough, and custom policies - most do NOT affect the default sanitize=True path but do affect helper APIs, programmatic DOM construction, html_passthrough=True, and custom policies. No public exploit identified at time of analysis; the issue was reported by VulnCheck and fixed in 1.15.0.