https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:07:04.191020+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-100613 cnvd-2021-100613 2026-10-07T17:07:04.194298+00:00 cnvd-2021-100613 https://cve.radiocsirt.org/vuln/euvd-2026-236008 EUVD-2026-236008 2026-10-07T17:07:04.194332+00:00 EUVD-2026-236008 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25978 fkie_cve-2021-25978 2026-10-07T17:07:04.194347+00:00

Apostrophe CMS versions between 2.63.0 to 3.3.1 are vulnerable to Stored XSS where an editor uploads an SVG file that contains malicious JavaScript onto the Images module, which triggers XSS once viewed.

 https://cve.radiocsirt.org/vuln/ghsa-4r9c-jghc-cx5m GHSA-4r9c-jghc-cx5m — Cross-site Scripting in apostrophe 2026-10-07T17:07:04.194374+00:00

Affected: npm: apostrophe

Apostrophe CMS versions between 2.63.0 to 3.3.1 are vulnerable to Stored XSS where an editor uploads an SVG file that contains malicious JavaScript onto the Images module, which triggers XSS once viewed.

 https://cve.radiocsirt.org/vuln/gsd-2021-25978 gsd-2021-25978 2026-10-07T17:07:04.194396+00:00 gsd-2021-25978