https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T19:20:23.238504+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-164990 EUVD-2026-164990 2026-10-08T19:20:23.385959+00:00 EUVD-2026-164990 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16043 fkie_cve-2017-16043 2026-10-08T19:20:23.386022+00:00

Shout is an IRC client. Because the `/topic` command in messages is unescaped, attackers have the ability to inject HTML scripts that will run in the victim's browser. Affects shout >=0.44.0 <=0.49.3.

 https://cve.radiocsirt.org/vuln/ghsa-26q7-g57v-mxcp GHSA-26q7-g57v-mxcp — HTML Injection in shout 2026-10-08T19:20:23.386076+00:00

Affected: npm: shout

Affected versions of `shout` do not escape the `/topic` command in messages, and are therefore vulnerable to cross-site scripting.

## Recommendation

Update to version 0.50.0 or later.

 https://cve.radiocsirt.org/vuln/gsd-2017-16043 gsd-2017-16043 2026-10-08T19:20:23.386120+00:00 gsd-2017-16043