Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:51:37 +0000 EUVD-2026-60693 https://cve.radiocsirt.org/vuln/euvd-2026-60693 EUVD-2026-60693 https://cve.radiocsirt.org/vuln/euvd-2026-60693 fkie_cve-2019-1020005 https://cve.radiocsirt.org/vuln/fkie_cve-2019-1020005 <p>invenio-communities before 1.0.0a20 allows XSS.</p> <p>invenio-communities before 1.0.0a20 allows XSS.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-1020005 GHSA-mfv8-q39f-mgfg — Cross-site Scripting in invenio-communities https://cve.radiocsirt.org/vuln/ghsa-mfv8-q39f-mgfg <p><strong>Affected:</strong> PyPI: invenio-communities</p> <p>## Cross-Site Scripting (XSS) vulnerability in Jinja templates</p> <p>### Impact A Cross-Site Scripting (XSS) vulnerability was discovered in two Jinja templates in the Invenio-Communities module. The vulnerability allows a user to create a new community and include script element tags inside the description and page fields.</p> <p>### Patches The problem has been patched in v1.0.0a20.</p> <p>### For more information If you have any questions or comments about this advisory: * Email us at [info@inveniosoftware.org](mailto:info@inveniosoftware.org)</p> <p><strong>Affected:</strong> PyPI: invenio-communities</p> <p>## Cross-Site Scripting (XSS) vulnerability in Jinja templates</p> <p>### Impact A Cross-Site Scripting (XSS) vulnerability was discovered in two Jinja templates in the Invenio-Communities module. The vulnerability allows a user to create a new community and include script element tags inside the description and page fields.</p> <p>### Patches The problem has been patched in v1.0.0a20.</p> <p>### For more information If you have any questions or comments about this advisory: * Email us at [info@inveniosoftware.org](mailto:info@inveniosoftware.org)</p> https://cve.radiocsirt.org/vuln/ghsa-mfv8-q39f-mgfg gsd-2019-1020005 https://cve.radiocsirt.org/vuln/gsd-2019-1020005 gsd-2019-1020005 https://cve.radiocsirt.org/vuln/gsd-2019-1020005 PYSEC-2019-25 https://cve.radiocsirt.org/vuln/pysec-2019-25 <p><strong>Affected:</strong> PyPI: invenio-communities</p> <p>invenio-communities before 1.0.0a20 allows XSS.</p> <p><strong>Affected:</strong> PyPI: invenio-communities</p> <p>invenio-communities before 1.0.0a20 allows XSS.</p> https://cve.radiocsirt.org/vuln/pysec-2019-25