VYPR

RTIR

by Request Tracker

CVEs (1)

  • CVE-2026-105456MedOct 30, 2026
    risk 0.27cvss —epss 0.00

    RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once…