title: Non-jqueryMsg version of mw.message(?).parse() doesn't escape HTML link: https://phabricator.wikimedia.org/T115888 reference: composer://mediawiki/core cve: CVE-2020-25828 branches: 1.31.x: time: 2020-09-24 01:26:41 versions: ['>=1.31.0', '<1.31.9'] 1.34.x: time: 2020-09-24 01:38:27 versions: ['>=1.34.0', '<1.34.3'] 1.35.x: time: 2020-09-24 17:14:47 versions: ['>=1.34.99', '<1.35.0']
info at phpclasses dot org