https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T18:27:05.179210+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-47691 EUVD-2026-47691 2026-10-10T18:27:05.181864+00:00 EUVD-2026-47691 https://cve.radiocsirt.org/vuln/fkie_cve-2020-35666 fkie_cve-2020-35666 2026-10-10T18:27:05.181896+00:00

Steedos Platform through 1.21.24 allows NoSQL injection because the /api/collection/findone implementation in server/packages/steedos_base.js mishandles req.body validation, as demonstrated by MongoDB operator attacks such as an X-User-Id[$ne]=1 value.

 https://cve.radiocsirt.org/vuln/ghsa-q7pj-xc3r-rm4w GHSA-q7pj-xc3r-rm4w 2026-10-10T18:27:05.181927+00:00

Steedos Platform through 1.21.24 allows NoSQL injection because the /api/collection/findone implementation in server/packages/steedos_base.js mishandles req.body validation, as demonstrated by MongoDB operator attacks such as an X-User-Id[$ne]=1 value.

 https://cve.radiocsirt.org/vuln/gsd-2020-35666 gsd-2020-35666 2026-10-10T18:27:05.181944+00:00 gsd-2020-35666