https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T01:56:26.747521+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-fava-cve-2022-2523 BREW-fava-CVE-2022-2523 — Cross-site Scripting (XSS) - Reflected in beancount/fava 2026-10-09T01:56:26.751887+00:00

Affected: Homebrew: fava

Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.2.

 https://cve.radiocsirt.org/vuln/euvd-2026-12413 EUVD-2026-12413 2026-10-09T01:56:26.751944+00:00 EUVD-2026-12413 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2523 fkie_cve-2022-2523 2026-10-09T01:56:26.751962+00:00

Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.2.

 https://cve.radiocsirt.org/vuln/ghsa-q8hg-3vqv-f8v3 GHSA-q8hg-3vqv-f8v3 — Fava vulnerable to Reflected Cross-site Scripting 2026-10-09T01:56:26.751984+00:00

Affected: PyPI: fava

Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.2. The `query_string` parameter of Fava is vulnerable to reflected cross-site scripting, for which a attacker can modify any information that the user is able to modify. This issue is fixed in version 1.22.2.

 https://cve.radiocsirt.org/vuln/gsd-2022-2523 gsd-2022-2523 2026-10-09T01:56:26.752006+00:00 gsd-2022-2523 https://cve.radiocsirt.org/vuln/pysec-2022-240 PYSEC-2022-240 2026-10-09T01:56:26.752018+00:00

Affected: PyPI: fava

Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.2.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2523 UBUNTU-CVE-2022-2523 2026-10-09T01:56:26.752034+00:00

Affected: Ubuntu:20.04:LTS: fava, Ubuntu:22.04:LTS: fava, Ubuntu:25.10: fava, Ubuntu:26.04:LTS: fava

Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.2.