https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T02:01:25.969197+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-189678 EUVD-2026-189678 2026-10-09T02:01:25.972057+00:00 EUVD-2026-189678 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3481 fkie_cve-2023-3481 2026-10-09T02:01:25.972094+00:00

Critters versions 0.0.17-0.0.19 have an issue when parsing the HTML, which leads to a potential cross-site scripting (XSS) bug. We recommend upgrading to version 0.0.20 of the extension.

 https://cve.radiocsirt.org/vuln/ghsa-cx3j-qqxj-9597 GHSA-cx3j-qqxj-9597 — Critters Cross-site Scripting Vulnerability 2026-10-09T02:01:25.972127+00:00

Affected: npm: critters

### Impact Critters version 0.0.17-0.0.19 have an issue when parsing the HTML which leads to a potential [cross-site scripting (XSS)](https://owasp.org/www-community/attacks/xss/) bug.

### Patches The bug has been fixed in `v0.0.20`.

### Workarounds Upgrading Critters version to `>0.0.20` is the easiest fix. This is a non breaking version upgrade so we recommend all users to use `v0.0.20`.

 https://cve.radiocsirt.org/vuln/gsd-2023-3481 gsd-2023-3481 2026-10-09T02:01:25.972153+00:00 gsd-2023-3481