https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T02:07:06.635567+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-171821 EUVD-2026-171821 2026-10-24T02:07:06.638205+00:00 EUVD-2026-171821 https://cve.radiocsirt.org/vuln/fkie_cve-2020-28459 fkie_cve-2020-28459 2026-10-24T02:07:06.638235+00:00

This affects all versions of package markdown-it-decorate. An attacker can add an event handler or use javascript:xxx for the link.

 https://cve.radiocsirt.org/vuln/ghsa-rhf5-2378-3w3w GHSA-rhf5-2378-3w3w — markdown-it-decorate vulnerable to cross-site scripting (XSS) 2026-10-24T02:07:06.638265+00:00

Affected: npm: markdown-it-decorate

markdown-it-decorate adds attributes, IDs and classes to Markdown, and the most recent version 1.2.2 was published in 2017. All versions are currently vulnerable to cross-site scripting (XSS) and there is no fixed version at this time

 https://cve.radiocsirt.org/vuln/gsd-2020-28459 gsd-2020-28459 2026-10-24T02:07:06.638290+00:00 gsd-2020-28459