https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:55:38.918648+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-44729 cnvd-2019-44729 2026-10-03T00:55:38.936119+00:00 cnvd-2019-44729 https://cve.radiocsirt.org/vuln/euvd-2026-57927 EUVD-2026-57927 2026-10-03T00:55:38.936163+00:00 EUVD-2026-57927 https://cve.radiocsirt.org/vuln/fkie_cve-2019-16769 fkie_cve-2019-16769 2026-10-03T00:55:38.936177+00:00

The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of RegExp.prototype.toString() backslash-escapes all forward slashes in regular expressions. If serialized data of regular expression objects are used in an environment other than Node.js, it is affected by this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-h9rv-jmmf-4pgx GHSA-h9rv-jmmf-4pgx — Cross-Site Scripting in serialize-javascript 2026-10-03T00:55:38.936210+00:00

Affected: npm: serialize-javascript

Versions of `serialize-javascript` prior to 2.1.1 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize serialized regular expressions. This vulnerability does not affect Node.js applications.

## Recommendation

Upgrade to version 2.1.1 or later.

 https://cve.radiocsirt.org/vuln/gsd-2019-16769 gsd-2019-16769 2026-10-03T00:55:38.936236+00:00 gsd-2019-16769 https://cve.radiocsirt.org/vuln/rhsa-2020:2796 RHSA-2020:2796 — Red Hat Security Advisory: Red Hat OpenShift Service Mesh servicemesh-grafana security update 2026-10-03T00:55:38.936249+00:00

kubernetes: YAML parsing vulnerable to "Billion Laughs" attack, allowing for remote denial of service npm-serialize-javascript: XSS via unsafe characters in serialized regular expressions npm-serialize-javascript: allows remote attackers to inject arbitrary code via the function deleteFunctions within index.js npmjs-websocket-extensions: ReDoS vulnerability in Sec-WebSocket-Extensions parser grafana: XSS annotation popup vulnerability grafana: XSS via column.title or cellLinkTooltip grafana: SSRF incorrect access control vulnerability allows unauthenticated users to make grafana send HTTP requests to any URL grafana: XSS via the OpenTSDB datasource

 https://cve.radiocsirt.org/vuln/suse-ru-2020:0671-1 SUSE-RU-2020:0671-1 — Recommended update for SUSE Manager Proxy 4.0 2026-10-03T00:55:38.936280+00:00

Recommended update for SUSE Manager Proxy 4.0

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0777 WID-SEC-W-2026-0777 — Red Hat OpenShift: Mehrere Schwachstellen 2026-10-03T00:55:38.936296+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen, einen Cross-Site-Scripting-Angriff durchzuführen, beliebigen Programmcode auszuführen, oder Auswirkungen hinsichtlich der Vertraulichkeit, Verfügbarkeit und Integrität zu verursachen.