https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T12:57:03.351330+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-330287 EUVD-2026-330287 2026-10-07T12:57:03.399041+00:00 EUVD-2026-330287 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57532 fkie_cve-2026-57532 2026-10-07T12:57:03.399079+00:00

Malicious HTML content contained in the layout specification of a PDF ticket or badge layout was executed when the PDF editor is opened in the browser. This could allow one backend user to inject JavaScript into the browser context of another backend user. Due to requirements of the PDF rendering and editing libraries used, this is one of the few pages in our backend that do not have a strong Content-Security-Policy that would render this capability useless for most scenarios.

 https://cve.radiocsirt.org/vuln/ghsa-4jgq-8mwg-w9q9 GHSA-4jgq-8mwg-w9q9 2026-10-07T12:57:03.399113+00:00

Malicious HTML content contained in the layout specification of a PDF ticket or badge layout was executed when the PDF editor is opened in the browser. This could allow one backend user to inject JavaScript into the browser context of another backend user. Due to requirements of the PDF rendering and editing libraries used, this is one of the few pages in our backend that do not have a strong Content-Security-Policy that would render this capability useless for most scenarios.