https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:24:47.341605+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-22360 cnvd-2020-22360 2026-10-03T09:24:47.406264+00:00 cnvd-2020-22360 https://cve.radiocsirt.org/vuln/euvd-2026-68174 EUVD-2026-68174 2026-10-03T09:24:47.406301+00:00 EUVD-2026-68174 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16484 fkie_cve-2018-16484 2026-10-03T09:24:47.406315+00:00

A XSS vulnerability was found in module m-server <1.4.2 that allows malicious Javascript code or HTML to be executed, due to the lack of escaping for special characters in folder names.

 https://cve.radiocsirt.org/vuln/ghsa-gmxv-xf2q-6j8m GHSA-gmxv-xf2q-6j8m — Cross-Site Scripting in m-server 2026-10-03T09:24:47.406345+00:00

Affected: npm: m-server

Versions of `m-server` before 1.4.2 are vulnerable to stored cross-site scripting. This vulnerability is exploitable if an attacker is able to control the name of a file that `m-server` is serving.

## Recommendation

Update to version 1.4.2 or later.

 https://cve.radiocsirt.org/vuln/gsd-2018-16484 gsd-2018-16484 2026-10-03T09:24:47.406370+00:00 gsd-2018-16484