https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T09:30:38.644922+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-82868 CVE-2026-82868 — @pdfme/schemas before 5.5.9 Cross-Site Scripting via SVG 2026-10-08T09:30:38.646157+00:00

Affected: pdfme schemas

@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the SVG schema plugin that renders user-supplied SVG content directly to innerHTML without sanitization. Attackers can inject malicious SVG with embedded scripts, event handlers, or foreignObject elements to execute arbitrary JavaScript in users' browsers when viewing or filling templates.