https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 21:28:21 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-03554 cnvd-2020-03554 https://cve.radiocsirt.org/vuln/cnvd-2020-03554 https://cve.radiocsirt.org/vuln/euvd-2026-59771 EUVD-2026-59771 https://cve.radiocsirt.org/vuln/euvd-2026-59771 https://cve.radiocsirt.org/vuln/fkie_cve-2019-20058 <p>Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the _profiler page. NOTE: this is disputed because profiling was never intended for use in production. This is related to CVE-2018-12040</p> <p>Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the _profiler page. NOTE: this is disputed because profiling was never intended for use in production. This is related to CVE-2018-12040</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-20058 https://cve.radiocsirt.org/vuln/ghsa-jh8g-f528-8mfh <p>** DISPUTED ** Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the _profiler page. NOTE: this is disputed because profiling was never intended for use in production. This is related to CVE-2018-12040.</p> <p>** DISPUTED ** Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the _profiler page. NOTE: this is disputed because profiling was never intended for use in production. This is related to CVE-2018-12040.</p> https://cve.radiocsirt.org/vuln/ghsa-jh8g-f528-8mfh https://cve.radiocsirt.org/vuln/gsd-2019-20058 gsd-2019-20058 https://cve.radiocsirt.org/vuln/gsd-2019-20058