https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:41:14.310517+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-30566 cnvd-2025-30566 2026-10-06T19:41:14.361366+00:00 cnvd-2025-30566 https://cve.radiocsirt.org/vuln/euvd-2026-290857 EUVD-2026-290857 2026-10-06T19:41:14.361414+00:00 EUVD-2026-290857 https://cve.radiocsirt.org/vuln/fkie_cve-2025-54057 fkie_cve-2025-54057 2026-10-06T19:41:14.361428+00:00

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking.

This issue affects Apache SkyWalking: <= 10.2.0.

Users are recommended to upgrade to version 10.3.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-v6x2-4q87-rf82 GHSA-v6x2-4q87-rf82 — Apache SkyWalking has a stored XSS vulnerability 2026-10-06T19:41:14.361461+00:00

Affected: Maven: org.apache.skywalking:apm-webapp

There is an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking.

This issue affects Apache SkyWalking versions <= 10.2.0.

Users are recommended to upgrade to version 10.3.0, which fixes the issue. Version 10.3.0 has not been uploaded to the Maven registry at time of publish, please see [release notes](https://github.com/apache/skywalking/releases/tag/v10.3.0) for download instructions.