<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-24T05:31:57.065586+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-231627</id>
    <title>EUVD-2026-231627</title>
    <updated>2026-10-24T05:31:57.068743+00:00</updated>
    <content>EUVD-2026-231627</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-231627"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2022-23474</id>
    <title>fkie_cve-2022-23474</title>
    <updated>2026-10-24T05:31:57.068778+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Editor.js is a block-style editor with clean JSON output. Versions prior to 2.26.0 are vulnerable to Code Injection via pasted input. The processHTML method passes pasted input into wrapper’s innerHTML. This issue is patched in version 2.26.0.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2022-23474"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-6mvj-2569-3mcm</id>
    <title>GHSA-6mvj-2569-3mcm — Editor.js vulnerable to Code Injection</title>
    <updated>2026-10-24T05:31:57.068812+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> npm: @editorjs/editorjs</p>
<p>Editor.js is a block-style editor with clean JSON output. Versions prior to 2.26.0 are vulnerable to Code Injection via pasted input. The processHTML method passes pasted input into wrapper’s innerHTML. This issue is patched in version 2.26.0.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-6mvj-2569-3mcm"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2022-23474</id>
    <title>gsd-2022-23474</title>
    <updated>2026-10-24T05:31:57.068847+00:00</updated>
    <content>gsd-2022-23474</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2022-23474"/>
  </entry>
</feed>
