https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T17:45:54.027678+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-3019 CVE-2025-3019 — Cross-site scripting vulnerabilities in KNIME Business Hub web pages 2026-10-08T17:45:54.043542+00:00

Affected: KNIME Business Hub

KNIME Business Hub is affected by several cross-site scripting vulnerabilities in its web pages. If a user clicks on a malicious link or opens a malicious web page, arbitrary Java Script may be executed with this user's permissions. This can lead to information loss and/or modification of existing data. The issues are caused by a bug https://github.com/Baroshem/nuxt-security/issues/610 in the widely used nuxt-security module.

There are no viable workarounds therefore we strongly recommend to update to one of the following versions of KNIME Business Hub:

* 1.13.3 or later

* 1.12.4 or later