https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T07:44:49.770817+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-00156 bdu:2026-00156 2026-10-22T07:44:49.774440+00:00 bdu:2026-00156 https://cve.radiocsirt.org/vuln/euvd-2026-221433 EUVD-2026-221433 2026-10-22T07:44:49.774479+00:00 EUVD-2026-221433 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2123 fkie_cve-2025-2123 2026-10-22T07:44:49.774494+00:00

A vulnerability, which was classified as problematic, has been found in GeSHi up to 1.0.9.1. Affected by this issue is the function get_var of the file /contrib/cssgen.php of the component CSS Handler. The manipulation of the argument default-styles/keywords-1/keywords-2/keywords-3/keywords-4/comments leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

 https://cve.radiocsirt.org/vuln/ghsa-pr6q-g5gv-qgr7 GHSA-pr6q-g5gv-qgr7 — GeSHi XSS possible in the get_var function of /contrib/cssgen.php 2026-10-22T07:44:49.774527+00:00

Affected: Packagist: geshi/geshi

A vulnerability, which was classified as problematic, has been found in GeSHi up to 1.0.9.1. Affected by this issue is the function get_var of the file /contrib/cssgen.php of the component CSS Handler. The manipulation of the argument default-styles/keywords-1/keywords-2/keywords-3/keywords-4/comments leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-2123 UBUNTU-CVE-2025-2123 2026-10-22T07:44:49.774551+00:00

Affected: Ubuntu:16.04:LTS: geshi, Ubuntu:18.04:LTS: geshi, Ubuntu:20.04:LTS: geshi, Ubuntu:22.04:LTS: geshi, Ubuntu:24.04:LTS: geshi, Ubuntu:25.10: geshi, Ubuntu:26.10: geshi, Ubuntu:26.04:LTS: geshi

A vulnerability, which was classified as problematic, has been found in GeSHi up to 1.0.9.1. Affected by this issue is the function get_var of the file /contrib/cssgen.php of the component CSS Handler. The manipulation of the argument default-styles/keywords-1/keywords-2/keywords-3/keywords-4/comments leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.