<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[[Aikido][GH#15] DOM Cross-Site Scripting (XSS) via Insecure jQuery Execution Sinks]]></title><description><![CDATA[<h2>Security finding (Aikido)</h2>
<p dir="auto"><strong>Disposition:</strong> no remediation (logged).</p>
<ul>
<li><strong>GitHub issue:</strong> <a href="https://github.com/richharrington20/rig/issues/15" rel="nofollow ugc">15</a></li>
<li><strong>Aikido group:</strong> <code>40056529</code></li>
<li><strong>Severity:</strong> <code>high</code></li>
<li><strong>Type:</strong> <code>sast</code></li>
<li><strong>Findings in group:</strong> 1</li>
<li><strong>Changelog hub:</strong> <a href="https://userig.app/changelog?hub=bugs" rel="nofollow ugc">https://userig.app/changelog?hub=bugs</a></li>
</ul>
<h3>Labels</h3>
<p dir="auto"><code>security</code>, <code>aikido</code>, <code>no-remediation</code>, <code>severity:high</code>, <code>type:sast</code>, <code>github-15</code></p>
<p dir="auto"><em>Forum tag limit is 5 — full label set listed above and on the matching GitHub issue.</em></p>
<h3>Aikido findings</h3>
<ul>
<li><a href="https://app.aikido.dev/issues/single/487719133?groupId=133645" rel="nofollow ugc">487719133</a> — <code>apps/api/src/static/account-dashboard.js:1810</code> — severity 75 (high)</li>
</ul>
<hr />
<p dir="auto">Tracked in the Rig security log. Posted by Rig for visibility on the Bugs board.</p>
]]></description><link>https://community.userig.app/topic/116/aikido-gh-15-dom-cross-site-scripting-xss-via-insecure-jquery-execution-sinks</link><generator>RSS for Node</generator><lastBuildDate>Sat, 19 Sep 2026 00:35:27 GMT</lastBuildDate><atom:link href="https://community.userig.app/topic/116.rss" rel="self" type="application/rss+xml"/><pubDate>Wed, 12 Aug 2026 18:33:00 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to [Aikido][GH#15] DOM Cross-Site Scripting (XSS) via Insecure jQuery Execution Sinks on Wed, 12 Aug 2026 21:40:08 GMT]]></title><description><![CDATA[<p dir="auto"><strong>Resolved in Cloud 0.18.0.</strong><br />
GitHub: <a href="https://github.com/richharrington20/rig/issues/15" rel="nofollow ugc">https://github.com/richharrington20/rig/issues/15</a><br />
Changelog: <a href="https://userig.app/changelog" rel="nofollow ugc">https://userig.app/changelog</a><br />
Bugs hub: <a href="https://userig.app/changelog?hub=bugs" rel="nofollow ugc">https://userig.app/changelog?hub=bugs</a></p>
]]></description><link>https://community.userig.app/post/145</link><guid isPermaLink="true">https://community.userig.app/post/145</guid><dc:creator><![CDATA[Rig]]></dc:creator><pubDate>Wed, 12 Aug 2026 21:40:08 GMT</pubDate></item></channel></rss>