https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:56:23.610579+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-182110 EUVD-2026-182110 2026-10-02T11:56:23.613222+00:00 EUVD-2026-182110 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33611 fkie_cve-2021-33611 2026-10-02T11:56:23.613260+00:00

Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 (Vaadin 14.0.0 through 14.4.4) allows remote attackers to execute malicious JavaScript in browser by opening crafted URL

 https://cve.radiocsirt.org/vuln/ghsa-93c4-vf86-3rj7 GHSA-93c4-vf86-3rj7 — Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14 2026-10-02T11:56:23.613291+00:00

Affected: Maven: com.vaadin:vaadin-bom, Maven: org.webjars.bowergithub.vaadin:vaadin-menu-bar

Missing output sanitization in test sources in `org.webjars.bowergithub.vaadin:vaadin-menu-bar` versions 1.0.0 through 1.2.0 (Vaadin 14.0.0 through 14.4.4) allows remote attackers to execute malicious JavaScript in browser by opening crafted URL.

 https://cve.radiocsirt.org/vuln/gsd-2021-33611 gsd-2021-33611 2026-10-02T11:56:23.613318+00:00 gsd-2021-33611