https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:31:37.300871+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-06624 cnvd-2015-06624 2026-10-03T06:31:37.304873+00:00 cnvd-2015-06624 https://cve.radiocsirt.org/vuln/euvd-2026-93615 EUVD-2026-93615 2026-10-03T06:31:37.304913+00:00 EUVD-2026-93615 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5654 fkie_cve-2015-5654 2026-10-03T06:31:37.304927+00:00

Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-p82g-2xpp-m5r3 GHSA-p82g-2xpp-m5r3 — Cross-Site Scripting in dojo 2026-10-03T06:31:37.304957+00:00

Affected: npm: dojo

Versions of `dojo` prior to 1.2.0 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize HTML code in user-controlled input, allowing attackers to execute arbitrary JavaScript in the victim's browser.

## Recommendation

Upgrade to version 1.2.0 or later.

 https://cve.radiocsirt.org/vuln/gsd-2015-5654 gsd-2015-5654 2026-10-03T06:31:37.304983+00:00 gsd-2015-5654 https://cve.radiocsirt.org/vuln/jvndb-2015-000153 jvndb-2015-000153 2026-10-03T06:31:37.304995+00:00

Dojo Toolkit is a software to assist in building web applications. Dojo Toolkit contains a cross-site scripting vulnerability. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.