https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:27:33.412620+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-223819 EUVD-2026-223819 2026-10-03T11:27:33.415320+00:00 EUVD-2026-223819 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8556 fkie_cve-2024-8556 2026-10-03T11:27:33.415349+00:00

A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser.

 https://cve.radiocsirt.org/vuln/ghsa-6mf6-7j75-2m6f GHSA-6mf6-7j75-2m6f — AgentScope stored cross-site scripting (XSS) vulnerability 2026-10-03T11:27:33.415381+00:00

Affected: PyPI: agentscope

A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser.

 https://cve.radiocsirt.org/vuln/pysec-2026-1076 PYSEC-2026-1076 — AgentScope stored cross-site scripting (XSS) vulnerability 2026-10-03T11:27:33.415406+00:00

Affected: PyPI: agentscope

A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser.