https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:59:44.271642+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-343726 EUVD-2026-343726 2026-10-05T07:59:44.273814+00:00 EUVD-2026-343726 https://cve.radiocsirt.org/vuln/fkie_cve-2026-67352 fkie_cve-2026-67352 2026-10-05T07:59:44.273846+00:00

luci-app-https-dns-proxy contains a stored cross-site scripting vulnerability in the resolver_url parameter that allows authenticated users to inject active HTML. When an administrator views the HTTPS DNS Proxy status page, the resolver URL is rendered as raw HTML and executes JavaScript in the administrator's browser origin.

 https://cve.radiocsirt.org/vuln/ghsa-8ggv-vmgf-36wq GHSA-8ggv-vmgf-36wq 2026-10-05T07:59:44.273877+00:00

luci-app-https-dns-proxy contains a stored cross-site scripting vulnerability in the resolver_url parameter that allows authenticated users to inject active HTML. When an administrator views the HTTPS DNS Proxy status page, the resolver URL is rendered as raw HTML and executes JavaScript in the administrator's browser origin.