https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T14:03:06.084112+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-262848 EUVD-2026-262848 2026-10-09T14:03:06.119057+00:00 EUVD-2026-262848 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66629 fkie_cve-2025-66629 2026-10-09T14:03:06.119103+00:00

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to 1.10.4, some of HedgeDoc's OAuth2 endpoints for social login providers such as Google, GitHub, GitLab, Facebook or Dropbox lack CSRF protection, since they don't send a state parameter and verify the response using this parameter. This vulnerability is fixed in 1.10.4.