https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T01:49:00.362598+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-05847 cnvd-2018-05847 2026-10-15T01:49:00.366909+00:00 cnvd-2018-05847 https://cve.radiocsirt.org/vuln/euvd-2026-79996 EUVD-2026-79996 2026-10-15T01:49:00.366945+00:00 EUVD-2026-79996 https://cve.radiocsirt.org/vuln/fkie_cve-2017-18197 fkie_cve-2017-18197 2026-10-15T01:49:00.366960+00:00

In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert() is missing flags to prevent XML External Entity (XXE) attacks, as demonstrated by /ServerView.

 https://cve.radiocsirt.org/vuln/ghsa-wvpv-8524-wg6x GHSA-wvpv-8524-wg6x — mxGraph vulnerable to XXE attacks 2026-10-15T01:49:00.366989+00:00

Affected: npm: mxgraph

In `mxGraphViewImageReader.java` in mxGraph before 3.7.6, the `SAXParserFactory` instance in `convert()` is missing flags to prevent XML External Entity (XXE) attacks, as demonstrated by `/ServerView`.

 https://cve.radiocsirt.org/vuln/gsd-2017-18197 gsd-2017-18197 2026-10-15T01:49:00.367012+00:00 gsd-2017-18197 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10879-1 openSUSE-SU-2024:10879-1 — jgraphx-3.9.2-1.9 on GA media 2026-10-15T01:49:00.367024+00:00

jgraphx-3.9.2-1.9 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-18197 UBUNTU-CVE-2017-18197 2026-10-15T01:49:00.367039+00:00

Affected: Ubuntu:16.04:LTS: libjgraphx-java, Ubuntu:18.04:LTS: libjgraphx-java

In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert() is missing flags to prevent XML External Entity (XXE) attacks, as demonstrated by /ServerView.