https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T13:13:52.362712+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-54443 CVE-2026-54443 — Dashy: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) 2026-10-08T13:13:52.380039+00:00

Affected: lissy93 dashy

Dashy is a self-hostable personal dashboard. From 1.9.4 until 3.2.0, the Dashy RSS Widget in src/components/Widgets/RssFeed.vue does not sanitize RSS item link values before rendering feed item titles and Read More links as anchor href attributes, allowing an attacker-controlled feed to provide a javascript: URI that executes when clicked in the Dashy origin. This issue is fixed in version 3.2.0.