https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:14:58.208489+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-18323 cnvd-2022-18323 2026-10-04T06:14:58.211771+00:00 cnvd-2022-18323 https://cve.radiocsirt.org/vuln/euvd-2026-21094 EUVD-2026-21094 2026-10-04T06:14:58.211803+00:00 EUVD-2026-21094 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3780 fkie_cve-2021-3780 2026-10-04T06:14:58.211818+00:00

peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

 https://cve.radiocsirt.org/vuln/ghsa-f2c5-997w-7f5c GHSA-f2c5-997w-7f5c — Cross-site Scripting in peertube 2026-10-04T06:14:58.211845+00:00

Affected: npm: peertube

peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'). It was found that one could upload a SVG image and then send the url of that to other users and when they open the link we can get their complete session keys as the session keys stored in local storage and with Javascript easily can be stolen by attackers.

 https://cve.radiocsirt.org/vuln/gsd-2021-3780 gsd-2021-3780 2026-10-04T06:14:58.211869+00:00 gsd-2021-3780