A new Debian Linux update has been published: DLA 2854-1: novnc security update
A novnc security update has been released for Debian GNU/Linux 9 LTS to address an issue where the remote VNC server could inject arbitrary HTML into the noVNC web page.Read more @ Linux Compatible
