https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T19:48:05.112252+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-337141 EUVD-2026-337141 2026-10-12T19:48:05.114084+00:00 EUVD-2026-337141 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9440 fkie_cve-2024-9440 2026-10-12T19:48:05.114112+00:00

Slim Select 2.0 versions through 2.9.0 are affected by a potential cross-site scripting vulnerability. In select.ts:createOption(), the text variable from the user-provided Options object is assigned to an innerHTML without sanitation. Software that depends on this library to dynamically generate lists using unsanitized user-provided input may be vulnerable to cross-site scripting, resulting in attacker executed JavaScript. At this time, no patch is available.

 https://cve.radiocsirt.org/vuln/ghsa-qvqv-mcxr-x8qw GHSA-qvqv-mcxr-x8qw — Slim Select has potential Cross-site Scripting issue 2026-10-12T19:48:05.114143+00:00

Affected: npm: slim-select

Slim Select 2.0 versions through 2.9.0 are affected by a potential cross-site scripting vulnerability. In select.ts:createOption(), the text variable from the user-provided Options object is assigned to an innerHTML without sanitation. Software that depends on this library to dynamically generate lists using unsanitized user-provided input may be vulnerable to cross-site scripting, resulting in attacker executed JavaScript. This vulnerability is fixed in 2.9.2.