<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: unicode</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2021-42694: An issue was discovered in the character definitions of the Unicode Specification through 14.0</title><link>https://patchthecve.com/cve/CVE-2021-42694.html</link><guid>https://patchthecve.com/cve/CVE-2021-42694.html</guid><pubDate>Wed, 17 Jun 2026 04:09:58 +0000</pubDate><description>HIGH 8.3: An issue was discovered in the character definitions of the Unicode Specification through 14.0. The specification allows an adversary to produce source code identifiers such as function names using homoglyphs that render visually identical to a target identifier. Adversaries can leverage this to inj</description></item><item><title>CVE-2021-42574: An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0</title><link>https://patchthecve.com/cve/CVE-2021-42574.html</link><guid>https://patchthecve.com/cve/CVE-2021-42574.html</guid><pubDate>Wed, 17 Jun 2026 04:09:50 +0000</pubDate><description>HIGH 8.3: An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and in</description></item><item><title>CVE-2016-10578: unicode loads unicode data downloaded from unicode.org into nodejs</title><link>https://patchthecve.com/cve/CVE-2016-10578.html</link><guid>https://patchthecve.com/cve/CVE-2016-10578.html</guid><pubDate>Wed, 17 Jun 2026 00:39:58 +0000</pubDate><description>HIGH 8.1: unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.</description></item></channel></rss>