https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T21:57:15.027692+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-244979 EUVD-2026-244979 2026-10-06T21:57:15.030228+00:00 EUVD-2026-244979 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23841 fkie_cve-2024-23841 2026-10-06T21:57:15.030261+00:00

apollo-client-nextjs is the Apollo Client support for the Next.js App Router. The @apollo/experimental-apollo-client-nextjs NPM package is vulnerable to a cross-site scripting vulnerability. To exploit this vulnerability, an attacker would need to either inject malicious input (e.g. by redirecting a user to a specifically-crafted link) or arrange to have malicious input be returned by a GraphQL server (e.g. by persisting it in a database). To fix this issue, please update to version 0.7.0 or later.

 https://cve.radiocsirt.org/vuln/ghsa-rv8p-rr2h-fgpg GHSA-rv8p-rr2h-fgpg — @apollo/experimental-nextjs-app-support Cross-site Scripting vulnerability 2026-10-06T21:57:15.030294+00:00

Affected: npm: @apollo/experimental-nextjs-app-support

### Impact

The @apollo/experimental-apollo-client-nextjs NPM package is vulnerable to a cross-site scripting vulnerability. This vulnerability arises from improper handling of untrusted input when @apollo/experimental-apollo-client-nextjs performs server-side rendering of HTML pages. To fix this vulnerability, we implemented appropriate escaping to prevent javascript injection into rendered pages.

### Patches

To fix this issue, please update to version 0.7.0 or later.

### Workarounds

There are no known workarounds for this issue. Please update to version 0.7.0

 https://cve.radiocsirt.org/vuln/gsd-2024-23841 gsd-2024-23841 2026-10-06T21:57:15.030325+00:00 gsd-2024-23841