https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T13:01:27.262775+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-262634 EUVD-2026-262634 2026-10-06T13:01:27.318499+00:00 EUVD-2026-262634 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66563 fkie_cve-2025-66563 2026-10-06T13:01:27.318535+00:00

Monkeytype is a minimalistic and customizable typing test. In 25.49.0 and earlier, there is improper handling of user input which allows an attacker to execute malicious javascript on anyone viewing a malicious quote submission. quote.text and quote.source are user input, and they're inserted straight into the DOM. If they contain HTML tags, they will be rendered (after some escaping using quotes and textarea tags).