https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T11:34:30.461745+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-225090 EUVD-2026-225090 2026-10-10T11:34:30.524456+00:00 EUVD-2026-225090 https://cve.radiocsirt.org/vuln/fkie_cve-2024-26318 fkie_cve-2024-26318 2026-10-10T11:34:30.524496+00:00

Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character.

 https://cve.radiocsirt.org/vuln/ghsa-5jjq-8cvj-v6m9 GHSA-5jjq-8cvj-v6m9 — Cross-site Scripting in Serenity 2026-10-10T11:34:30.524528+00:00

Affected: NuGet: Serenity.Net.Core, npm: @serenity-is/corelib

Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character.

 https://cve.radiocsirt.org/vuln/gsd-2024-26318 gsd-2024-26318 2026-10-10T11:34:30.524553+00:00 gsd-2024-26318