The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting     (XSS) attacks by leveraging mishandling of special characters in attribute values, a different     vulnerability than CVE-2016-9909. (CVE-2016-9910)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting
    (XSS) attacks by leveraging mishandling of special characters in attribute values, a different
    vulnerability than CVE-2016-9909. (CVE-2016-9910)

ID	Name	Product	Family	Severity
254838	Linux Distros Unpatched Vulnerability : CVE-2016-9910	Nessus	Misc.	medium
412617	SCA: security update for html5lib (GHSA-8f6m-gfq9-g33v)	Tenable Cloud Security	SCA Checks	medium
412617	SCA: security update for html5lib (GHSA-8f6m-gfq9-g33v)	Tenable Self-Hosted Container Security	SCA Checks	medium

Detections

Analytics

CVE-2016-9910

medium

Tenable Plugins

medium

medium

medium