https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T15:51:44.307881+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-212395 EUVD-2026-212395 2026-10-08T15:51:44.310930+00:00 EUVD-2026-212395 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2583 fkie_cve-2023-2583 2026-10-08T15:51:44.310966+00:00

Code Injection in GitHub repository jsreport/jsreport prior to 3.11.3.

 https://cve.radiocsirt.org/vuln/ghsa-g7rj-q722-245g GHSA-g7rj-q722-245g — jsreport vulnerable to code injection 2026-10-08T15:51:44.310999+00:00

Affected: npm: jsreport

jsreport prior to 3.11.3 had a version of vm2 vulnerable to CVE-2023-29017 hard coded in the package.json of the jsreport-core component. An attacker can use this vulnerability to obtain the authority of the jsreport playground server, or construct a malicious webpage/html file and send it to the user to attack the installed jsreport client.

 https://cve.radiocsirt.org/vuln/gsd-2023-2583 gsd-2023-2583 2026-10-08T15:51:44.311025+00:00 gsd-2023-2583