https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T11:23:23.720693+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-199526 EUVD-2026-199526 2026-10-08T11:23:23.723235+00:00 EUVD-2026-199526 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27477 fkie_cve-2024-27477 2026-10-08T11:23:23.723267+00:00

In Leantime 3.0.6, a Cross-Site Scripting vulnerability exists within the ticket creation and modification functionality, allowing attackers to inject malicious JavaScript code into the title field of tickets (also known as to-dos). This stored XSS vulnerability can be exploited to perform Server-Side Request Forgery (SSRF) attacks.

 https://cve.radiocsirt.org/vuln/ghsa-fw35-8hjm-jw2p GHSA-fw35-8hjm-jw2p 2026-10-08T11:23:23.723299+00:00

In Leantime 3.0.6, a Cross-Site Scripting vulnerability exists within the ticket creation and modification functionality, allowing attackers to inject malicious JavaScript code into the title field of tickets (also known as to-dos). This stored XSS vulnerability can be exploited to perform Server-Side Request Forgery (SSRF) attacks.

 https://cve.radiocsirt.org/vuln/gsd-2024-27477 gsd-2024-27477 2026-10-08T11:23:23.723317+00:00 gsd-2024-27477