https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:20:48.037517+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-157888 EUVD-2026-157888 2026-10-03T13:20:48.042227+00:00 EUVD-2026-157888 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27083 fkie_cve-2024-27083 2026-10-03T13:20:48.042267+00:00

Flask-AppBuilder is an application development framework, built on top of Flask. A Cross-Site Scripting (XSS) vulnerability has been discovered on the OAuth login page. An attacker could trick a user to follow a specially crafted URL to the OAuth login page. This URL could inject and execute malicious javascript code that would get executed on the user's browser. This issue was introduced on 4.1.4 and patched on 4.2.1.

 https://cve.radiocsirt.org/vuln/ghsa-fqxj-46wg-9v84 GHSA-fqxj-46wg-9v84 — Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS) 2026-10-03T13:20:48.042303+00:00

Affected: PyPI: Flask-AppBuilder

### Impact A Cross-Site Scripting (XSS) vulnerability has been discovered on the OAuth login page. An attacker could trick a user to follow a specially crafted URL to the OAuth login page. This URL could inject and execute malicious javascript code that would get executed on the user's browser.

Impacted versions: Flask-AppBuilder version 4.1.4 up to and including 4.2.0

### Patches This issue was introduced on 4.1.4 and patched on 4.2.1, user's should upgrade to 4.2.1 or newer versions.

 https://cve.radiocsirt.org/vuln/gsd-2024-27083 gsd-2024-27083 2026-10-03T13:20:48.042333+00:00 gsd-2024-27083 https://cve.radiocsirt.org/vuln/pysec-2026-1381 PYSEC-2026-1381 — Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS) 2026-10-03T13:20:48.042346+00:00

Affected: PyPI: flask-appbuilder

### Impact A Cross-Site Scripting (XSS) vulnerability has been discovered on the OAuth login page. An attacker could trick a user to follow a specially crafted URL to the OAuth login page. This URL could inject and execute malicious javascript code that would get executed on the user's browser.

Impacted versions: Flask-AppBuilder version 4.1.4 up to and including 4.2.0

### Patches This issue was introduced on 4.1.4 and patched on 4.2.1, user's should upgrade to 4.2.1 or newer versions.