https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T06:31:32.962712+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-225866 EUVD-2026-225866 2026-10-08T06:31:32.966333+00:00 EUVD-2026-225866 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25967 fkie_cve-2022-25967 2026-10-08T06:31:32.966373+00:00

Versions of the package eta before 2.0.0 are vulnerable to Remote Code Execution (RCE) by overwriting template engine configuration variables with view options received from The Express render API. **Note:** This is exploitable only for users who are rendering templates with user-defined data.

 https://cve.radiocsirt.org/vuln/ghsa-mf6x-hrgr-658f GHSA-mf6x-hrgr-658f — Eta vulnerable to Code Injection via templates rendered with user-defined data 2026-10-08T06:31:32.966409+00:00

Affected: npm: eta

Versions of the package eta before 2.0.0 are vulnerable to Remote Code Execution (RCE) by overwriting template engine configuration variables with view options received from The Express render API. **Note:** This is exploitable only for users who are rendering templates with user-defined data.

 https://cve.radiocsirt.org/vuln/gsd-2022-25967 gsd-2022-25967 2026-10-08T06:31:32.966473+00:00 gsd-2022-25967