https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:53:56 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-11020 cnvd-2018-11020 https://cve.radiocsirt.org/vuln/cnvd-2018-11020 https://cve.radiocsirt.org/vuln/euvd-2026-65406 EUVD-2026-65406 https://cve.radiocsirt.org/vuln/euvd-2026-65406 https://cve.radiocsirt.org/vuln/fkie_cve-2018-11627 <p>Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.</p> <p>Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-11627 https://cve.radiocsirt.org/vuln/ghsa-mq35-wqvf-r23c <p><strong>Affected:</strong> RubyGems: sinatra</p> <p>Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.</p> <p><strong>Affected:</strong> RubyGems: sinatra</p> <p>Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.</p> https://cve.radiocsirt.org/vuln/ghsa-mq35-wqvf-r23c https://cve.radiocsirt.org/vuln/gsd-2018-11627 gsd-2018-11627 https://cve.radiocsirt.org/vuln/gsd-2018-11627 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11353-1 <p>ruby2.7-rubygem-sinatra-2.1.0-1.6 on GA media</p> <p>ruby2.7-rubygem-sinatra-2.1.0-1.6 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11353-1 https://cve.radiocsirt.org/vuln/rhsa-2019:0212 <p>rubygem-nokogiri: XML eXternal Entity (XXE) flaw rubygem-rails-html-sanitizer: non-whitelisted attributes are present in sanitized output when input with specially-crafted HTML fragments leading to XSS vulnerability rubygem-loofah: XSS vulnerability due to unescaped comments within attributes by libxml2 rubygem-sinatra: XSS in the 400 Bad Request page</p> <p>rubygem-nokogiri: XML eXternal Entity (XXE) flaw rubygem-rails-html-sanitizer: non-whitelisted attributes are present in sanitized output when input with specially-crafted HTML fragments leading to XSS vulnerability rubygem-loofah: XSS vulnerability due to unescaped comments within attributes by libxml2 rubygem-sinatra: XSS in the 400 Bad Request page</p> https://cve.radiocsirt.org/vuln/rhsa-2019:0212 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-11627 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: ruby-sinatra, Ubuntu:22.04:LTS: ruby-sinatra</p> <p>Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: ruby-sinatra, Ubuntu:22.04:LTS: ruby-sinatra</p> <p>Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-11627