https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T19:26:32.175249+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-162273 EUVD-2026-162273 2026-10-10T19:26:32.178040+00:00 EUVD-2026-162273 https://cve.radiocsirt.org/vuln/fkie_cve-2023-50883 fkie_cve-2023-50883 2026-10-10T19:26:32.178072+00:00

ONLYOFFICE Docs before 8.0.1 allows XSS because a macro is an immediately-invoked function expression (IIFE), and therefore a sandbox escape is possible by directly calling the constructor of the Function object. NOTE: this issue exists because of an incorrect fix for CVE-2021-43446.

 https://cve.radiocsirt.org/vuln/ghsa-rcqr-8g6q-fmc3 GHSA-rcqr-8g6q-fmc3 2026-10-10T19:26:32.178105+00:00

ONLYOFFICE Docs before 8.0.1 allows XSS because a macro is an immediately-invoked function expression (IIFE), and therefore a sandbox escape is possible by directly calling the constructor of the Function object. NOTE: this issue exists because of an incorrect fix for CVE-2021-43446.

 https://cve.radiocsirt.org/vuln/gsd-2023-50883 gsd-2023-50883 2026-10-10T19:26:32.178122+00:00 gsd-2023-50883