https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T18:49:34.925823+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-212734 EUVD-2026-212734 2026-10-07T18:49:34.928439+00:00 EUVD-2026-212734 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1384 fkie_cve-2023-1384 2026-10-07T18:49:34.928478+00:00

The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for arbitrary javascript code to be run

This issue affects:

Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS versions prior to 7.6.3.3.

 https://cve.radiocsirt.org/vuln/ghsa-37fc-xjq7-ff6p GHSA-37fc-xjq7-ff6p 2026-10-07T18:49:34.928512+00:00

The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for arbitrary javascript code to be run

This issue affects:

Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS versions prior to 7.6.3.3.

 https://cve.radiocsirt.org/vuln/gsd-2023-1384 gsd-2023-1384 2026-10-07T18:49:34.928531+00:00 gsd-2023-1384