https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T12:38:50.139288+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-251046 EUVD-2026-251046 2026-10-17T12:38:50.388186+00:00 EUVD-2026-251046 https://cve.radiocsirt.org/vuln/fkie_cve-2025-50978 fkie_cve-2025-50978 2026-10-17T12:38:50.388228+00:00

In Gitblit v1.7.1, a reflected cross-site scripting (XSS) vulnerability exists in the way repository path names are handled. By injecting a specially crafted path payload an attacker can cause arbitrary JavaScript to execute when a victim views the manipulated URL. This flaw stems from insufficient input sanitization of filename elements.

 https://cve.radiocsirt.org/vuln/ghsa-p3vx-hvxm-9ghv GHSA-p3vx-hvxm-9ghv 2026-10-17T12:38:50.388265+00:00

In Gitblit v1.7.1, a reflected cross-site scripting (XSS) vulnerability exists in the way repository path names are handled. By injecting a specially crafted path payload an attacker can cause arbitrary JavaScript to execute when a victim views the manipulated URL. This flaw stems from insufficient input sanitization of filename elements.