https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:00:59.949961+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-29882 CVE-2024-29882 — SRS DOM - XSS on JSONP callback 2026-10-06T18:00:59.971505+00:00

Affected: ossrs srs, ossrs simple_realtime_server

SRS is a simple, high-efficiency, real-time video server. SRS's `/api/v1/vhosts/vid-<id>?callback=<payload>` endpoint didn't filter the callback function name which led to injecting malicious javascript payloads and executing XSS ( Cross-Site Scripting). This vulnerability is fixed in 5.0.210 and 6.0.121.