https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T18:23:37.588445+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-233364 EUVD-2026-233364 2026-10-14T18:23:37.590962+00:00 EUVD-2026-233364 https://cve.radiocsirt.org/vuln/fkie_cve-2022-46151 fkie_cve-2022-46151 2026-10-14T18:23:37.590997+00:00

Querybook is an open source data querying UI. In affected versions user provided data is not escaped in the error field of the auth callback url in `querybook/server/app/auth/oauth_auth.py` and `querybook/server/app/auth/okta_auth.py`. This may allow attackers to perform reflected cross site scripting (XSS) if Content Security Policy (CSP) is not enabled or `unsafe-inline` is allowed. Users are advised to upgrade to the latest, patched version of querybook (version 3.14.2 or greater). Users unable to upgrade may enable CSP and not allow unsafe-inline or manually escape query parameters in a reverse proxy.

 https://cve.radiocsirt.org/vuln/gsd-2022-46151 gsd-2022-46151 2026-10-14T18:23:37.591033+00:00 gsd-2022-46151