https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:30:30.888453+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-87952 cnvd-2022-87952 2026-10-04T16:30:30.965423+00:00 cnvd-2022-87952 https://cve.radiocsirt.org/vuln/euvd-2026-180497 EUVD-2026-180497 2026-10-04T16:30:30.965468+00:00 EUVD-2026-180497 https://cve.radiocsirt.org/vuln/fkie_cve-2022-32171 fkie_cve-2022-32171 2026-10-04T16:30:30.965484+00:00

In Zinc, versions v0.1.9 through v0.3.1 are vulnerable to Stored Cross-Site Scripting when using the delete user functionality. When an authenticated user deletes a user having a XSS payload in the user id field, the javascript payload will be executed and allow an attacker to access the user’s credentials.

 https://cve.radiocsirt.org/vuln/ghsa-4fgv-8448-gf82 GHSA-4fgv-8448-gf82 — Zinc Cross-site Scripting vulnerability 2026-10-04T16:30:30.965519+00:00

Affected: Go: github.com/zincsearch/zincsearch, Go: github.com/zinclabs/zinc

In Zinc, versions v0.1.9 through v0.3.1 are vulnerable to Stored Cross-Site Scripting when using the delete user functionality. When an authenticated user deletes a user having a XSS payload in the user id field, the javascript payload will be executed and allow an attacker to access the user’s credentials.

 https://cve.radiocsirt.org/vuln/gsd-2022-32171 gsd-2022-32171 2026-10-04T16:30:30.965548+00:00 gsd-2022-32171