https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T17:55:08.443359+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-262492 EUVD-2026-262492 2026-10-15T17:55:08.479919+00:00 EUVD-2026-262492 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8101 fkie_cve-2025-8101 2026-10-15T17:55:08.479984+00:00

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Linkify (linkifyjs) allows XSS Targeting HTML Attributes and Manipulating User-Controlled Variables.This issue affects Linkify: from 4.3.1 before 4.3.2.

 https://cve.radiocsirt.org/vuln/ghsa-95jq-xph2-cx9h GHSA-95jq-xph2-cx9h — Linkify Allows Prototype Pollution & HTML Attribute Injection (XSS) 2026-10-15T17:55:08.480041+00:00

Affected: npm: linkifyjs

Prototype Pollution in internal `assign()` helper in Linkify allows remote attackers to execute arbitrary JavaScript (Stored or Reflected XSS) via injection of event handlers through unfiltered proto property. This issue affects Linkify version 4.3.1 and is fixed in 4.3.2.