https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T14:46:07.108261+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-03625 bdu:2021-03625 2026-10-18T14:46:07.192608+00:00 bdu:2021-03625 https://cve.radiocsirt.org/vuln/euvd-2026-215941 EUVD-2026-215941 2026-10-18T14:46:07.192645+00:00 EUVD-2026-215941 https://cve.radiocsirt.org/vuln/fkie_cve-2020-26298 fkie_cve-2020-26298 2026-10-18T14:46:07.192660+00:00

Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. In affected versions no HTML escaping was being performed when processing quotes. This applies even when the `:escape_html` option was being used. This is fixed in version 3.5.1 by the referenced commit.

 https://cve.radiocsirt.org/vuln/ghsa-q3wr-qw3g-3p4h GHSA-q3wr-qw3g-3p4h β€” Injection/XSS in Redcarpet 2026-10-18T14:46:07.192693+00:00

Affected: RubyGems: redcarpet

Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. In affected versions no HTML escaping was being performed when processing quotes. This applies even when the `:escape_html` option was being used. This is fixed in version 3.5.1 by the referenced commit.

 https://cve.radiocsirt.org/vuln/gsd-2020-26298 gsd-2020-26298 2026-10-18T14:46:07.192717+00:00 gsd-2020-26298 https://cve.radiocsirt.org/vuln/oesa-2021-1175 OESA-2021-1175 β€” rubygem-redcarpet security update 2026-10-18T14:46:07.192729+00:00

Affected: openEuler:20.03-LTS-SP1: rubygem-redcarpet

A fast, safe and extensible Markdown to (X)HTML parser. Security Fix(es): Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. In affected versions no HTML escaping was being performed when processing quotes. This applies even when the `:escape_html` option was being used. This is fixed in version 3.5.1 by the referenced commit.(CVE-2020-26298)

 https://cve.radiocsirt.org/vuln/suse-su-2021:3728-1 SUSE-SU-2021:3728-1 β€” Security update for ardana-ansible, ardana-monasca, documentation-suse-openstack-cloud, openstack-ec2-api, openstack-he… 2026-10-18T14:46:07.192750+00:00

Security update for ardana-ansible, ardana-monasca, documentation-suse-openstack-cloud, openstack-ec2-api, openstack-heat-templates, python-Django, python-monasca-common, rubygem-redcarpet, rubygem-puma