https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T17:30:44.557992+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-88818 cnvd-2022-88818 2026-10-15T17:30:44.561258+00:00 cnvd-2022-88818 https://cve.radiocsirt.org/vuln/euvd-2026-240791 EUVD-2026-240791 2026-10-15T17:30:44.561290+00:00 EUVD-2026-240791 https://cve.radiocsirt.org/vuln/fkie_cve-2022-21169 fkie_cve-2022-21169 2026-10-15T17:30:44.561305+00:00

The package express-xss-sanitizer before 1.1.3 are vulnerable to Prototype Pollution via the allowedTags attribute, allowing the attacker to bypass xss sanitization.

 https://cve.radiocsirt.org/vuln/ghsa-grjp-4jmr-mjcw GHSA-grjp-4jmr-mjcw — express-xss-sanitizer vulnerable to Prototype Pollution via allowedTags attribute 2026-10-15T17:30:44.561331+00:00

Affected: npm: express-xss-sanitizer

The package express-xss-sanitizer before 1.1.3 is vulnerable to Prototype Pollution via the `allowedTags` attribute, allowing the attacker to bypass xss sanitization.

 https://cve.radiocsirt.org/vuln/gsd-2022-21169 gsd-2022-21169 2026-10-15T17:30:44.561353+00:00 gsd-2022-21169