https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T08:47:42.198977+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-253802 EUVD-2026-253802 2026-10-05T08:47:42.231240+00:00 EUVD-2026-253802 https://cve.radiocsirt.org/vuln/fkie_cve-2025-54592 fkie_cve-2025-54592 2026-10-05T08:47:42.231276+00:00

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not properly terminate the session during logout. After a user logs out, the session cookie remains active and unchanged. The unchanged cookie could be reused by an attacker if a new session were to be started. This failure to invalidate the session can lead to session hijacking and fixation vulnerabilities. This issue is fixed in version 1.27.0