https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T11:20:19.609234+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-176794 EUVD-2026-176794 2026-10-15T11:20:19.671221+00:00 EUVD-2026-176794 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25760 fkie_cve-2022-25760 2026-10-15T11:20:19.671257+00:00

All versions of package accesslog are vulnerable to Arbitrary Code Injection due to the usage of the Function constructor without input sanitization. If (attacker-controlled) user input is given to the format option of the package's exported constructor function, it is possible for an attacker to execute arbitrary JavaScript code on the host that this package is being run on.

 https://cve.radiocsirt.org/vuln/ghsa-8m2f-74r2-x3f2 GHSA-8m2f-74r2-x3f2 — Code injection in accesslog 2026-10-15T11:20:19.671291+00:00

Affected: npm: accesslog

All versions of package accesslog are vulnerable to Arbitrary Code Injection due to the usage of the Function constructor without input sanitization. If (attacker-controlled) user input is given to the format option of the package's exported constructor function, it is possible for an attacker to execute arbitrary JavaScript code on the host that this package is being run on.

 https://cve.radiocsirt.org/vuln/gsd-2022-25760 gsd-2022-25760 2026-10-15T11:20:19.671316+00:00 gsd-2022-25760