https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:27:08.262593+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-324610 EUVD-2026-324610 2026-10-07T21:27:08.310305+00:00 EUVD-2026-324610 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8879 fkie_cve-2026-8879 2026-10-07T21:27:08.310344+00:00

Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scripting.registerContentScripts() at runtime. This script is NOT declared in manifest.json and bypasses Chrome Web Store static security review. It runs on all URLs and immediately hides all page content, creates a full-page overlay, pauses all videos, and only restores content when the service worker confirms the page passes filtering. If Securly's servers are unreachable, pages remain indefinitely hidden.

 https://cve.radiocsirt.org/vuln/ghsa-jg8r-xqh5-556r GHSA-jg8r-xqh5-556r 2026-10-07T21:27:08.310403+00:00

Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scripting.registerContentScripts() at runtime. This script is NOT declared in manifest.json and bypasses Chrome Web Store static security review. It runs on all URLs and immediately hides all page content, creates a full-page overlay, pauses all videos, and only restores content when the service worker confirms the page passes filtering. If Securly's servers are unreachable, pages remain indefinitely hidden.