https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:24:10.544926+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-325666 EUVD-2026-325666 2026-10-03T06:24:10.551499+00:00 EUVD-2026-325666 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47345 fkie_cve-2026-47345 2026-10-03T06:24:10.551531+00:00

Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.

 https://cve.radiocsirt.org/vuln/ghsa-p5j5-4j3q-8mq8 GHSA-p5j5-4j3q-8mq8 — TYPO3 HTML Sanitizer allows Cross-site Scripting 2026-10-03T06:24:10.551561+00:00

Affected: Packagist: typo3/html-sanitizer

Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of `typo3/html-sanitizer` before version 2.3.2.

Credits to Doyensec in collaboration with Claude and Anthropic Research for reporting this vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1835 WID-SEC-W-2026-1835 — TYPO3 Core: Mehrere Schwachstellen 2026-10-03T06:24:10.551587+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um Sicherheitsbeschränkungen zu umgehen, Benutzer auf schädliche Websites umzuleiten, beliebigen Code auszuführen, Berechtigungen zu eskalieren oder andere Auswirkungen zu verursachen.