https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T02:05:18.752702+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0701 certfr-2023-avi-0701 — De multiples vulnérabilités ont été découvertes dans Splunk. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-04T02:05:18.835833+00:00 certfr-2023-avi-0701 https://cve.radiocsirt.org/vuln/euvd-2026-21422 EUVD-2026-21422 2026-10-04T02:05:18.835875+00:00 EUVD-2026-21422 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20066 fkie_cve-2021-20066 2026-10-04T02:05:18.835890+00:00

JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled.

 https://cve.radiocsirt.org/vuln/ghsa-f4c9-cqv8-9v98 Withdrawn: GHSA-f4c9-cqv8-9v98 — Withdrawn Advisory: Insufficient Granularity of Access Control in JSDom 2026-10-04T02:05:18.835919+00:00

Withdrawn by the publisher.

Affected: npm: jsdom

# Withdrawn Advisory

This advisory has been withdrawn because the user must configure jsdom to allow access to local files.

# Original Description

JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled.

 https://cve.radiocsirt.org/vuln/gsd-2021-20066 gsd-2021-20066 2026-10-04T02:05:18.835945+00:00 gsd-2021-20066 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20066 UBUNTU-CVE-2021-20066 2026-10-04T02:05:18.835958+00:00

Affected: Ubuntu:16.04:LTS: node-jsdom, Ubuntu:22.04:LTS: node-jsdom, Ubuntu:24.04:LTS: node-jsdom, Ubuntu:25.10: node-jsdom, Ubuntu:26.04:LTS: node-jsdom

JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2229 WID-SEC-W-2023-2229 — Splunk Splunk Enterprise: Mehrere Schwachstellen 2026-10-04T02:05:18.835982+00:00

Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um beliebigen Code auszuführen, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern und weitere, nicht spezifizierte Auswirkungen zu verursachen.