https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T06:43:29.537782+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338133 EUVD-2026-338133 2026-10-09T06:43:29.572670+00:00 EUVD-2026-338133 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54443 fkie_cve-2026-54443 2026-10-09T06:43:29.572716+00:00

Dashy is a self-hostable personal dashboard. From 1.9.4 until 3.2.0, the Dashy RSS Widget in src/components/Widgets/RssFeed.vue does not sanitize RSS item link values before rendering feed item titles and Read More links as anchor href attributes, allowing an attacker-controlled feed to provide a javascript: URI that executes when clicked in the Dashy origin. This issue is fixed in version 3.2.0.