https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:13:38.039574+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-190240 EUVD-2026-190240 2026-10-03T17:13:38.093846+00:00 EUVD-2026-190240 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47067 fkie_cve-2024-47067 2026-10-03T17:13:38.093885+00:00

AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerability in helper.go. The endpoint /i/:link_name takes in a user-provided value and reflects it back in the response. The endpoint returns an application/xml response, opening it up to HTML tags via XHTML and thus leading to a XSS vulnerability. This vulnerability is fixed in 3.29.0.

 https://cve.radiocsirt.org/vuln/ghsa-8pph-gfhp-w226 GHSA-8pph-gfhp-w226 — Alist reflected Cross-Site Scripting vulnerability 2026-10-03T17:13:38.093919+00:00

Affected: Go: github.com/alist-org/alist/v3

AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerability in helper.go. The endpoint /i/:link_name takes in a user-provided value and reflects it back in the response. The endpoint returns an application/xml response, opening it up to HTML tags via XHTML and thus leading to a XSS vulnerability. This vulnerability is fixed in 3.29.0.

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:0350-1 openSUSE-SU-2024:0350-1 — Security update for govulncheck-vulndb 2026-10-03T17:13:38.093944+00:00

Security update for govulncheck-vulndb

 https://cve.radiocsirt.org/vuln/suse-su-2024:3911-1 SUSE-SU-2024:3911-1 — Security update for govulncheck-vulndb 2026-10-03T17:13:38.093975+00:00

Security update for govulncheck-vulndb