https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T16:38:25.668868+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-358809 EUVD-2026-358809 2026-10-05T16:38:25.724593+00:00 EUVD-2026-358809 https://cve.radiocsirt.org/vuln/fkie_cve-2026-79660 fkie_cve-2026-79660 2026-10-05T16:38:25.724630+00:00

Ech0 versions before 4.7.3 expose guest commenter email addresses through public API endpoints due to improper JSON serialization tags on the Comment model. Unauthenticated attackers can harvest all commenter emails by calling the /api/comments and /api/comments/public endpoints without authentication.

 https://cve.radiocsirt.org/vuln/ghsa-845p-52xj-2432 GHSA-845p-52xj-2432 2026-10-05T16:38:25.724664+00:00

Ech0 versions before 4.7.3 expose guest commenter email addresses through public API endpoints due to improper JSON serialization tags on the Comment model. Unauthenticated attackers can harvest all commenter emails by calling the /api/comments and /api/comments/public endpoints without authentication.