https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:56:06 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-06615 bdu:2022-06615 https://cve.radiocsirt.org/vuln/bdu:2022-06615 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0869 certfr-2023-avi-0869 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0869 https://cve.radiocsirt.org/vuln/euvd-2026-169899 EUVD-2026-169899 https://cve.radiocsirt.org/vuln/euvd-2026-169899 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7746 <p>This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.</p> <p>This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-7746 https://cve.radiocsirt.org/vuln/ghsa-h68q-55jf-x68w <p><strong>Affected:</strong> npm: chart.js</p> <p>This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.</p> <p><strong>Affected:</strong> npm: chart.js</p> <p>This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.</p> https://cve.radiocsirt.org/vuln/ghsa-h68q-55jf-x68w https://cve.radiocsirt.org/vuln/gsd-2020-7746 gsd-2020-7746 https://cve.radiocsirt.org/vuln/gsd-2020-7746 https://cve.radiocsirt.org/vuln/jvndb-2026-033235 <p>CONPROSYS series provided by Contec Co., Ltd. contains multiple vulnerabilities listed below.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/78.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/548.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/1395.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://www.cve.org/CVERecord?id=CVE-2020-7746&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/434.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/787.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/352.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/256.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/306.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/121.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/522.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/306.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/95.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Cross-site scripting (CWE-79) - CVE-2026-82773, CVE-2026-82776, CVE-2026-82788&lt;/li&gt;&lt;li&gt;OS command injection (CWE-78) - CVE-2026-82774, CVE-2026-82777, CVE-2026-82779&lt;/li&gt;&lt;li&gt;Exposure of information through directory listing (CWE-548…</p> <p>CONPROSYS series provided by Contec Co., Ltd. contains multiple vulnerabilities listed below.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/78.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/548.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/1395.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://www.cve.org/CVERecord?id=CVE-2020-7746&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/434.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/787.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/352.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/256.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/306.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/121.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/522.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/306.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/95.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Cross-site scripting (CWE-79) - CVE-2026-82773, CVE-2026-82776, CVE-2026-82788&lt;/li&gt;&lt;li&gt;OS command injection (CWE-78) - CVE-2026-82774, CVE-2026-82777, CVE-2026-82779&lt;/li&gt;&lt;li&gt;Exposure of information through directory listing (CWE-548…</p> https://cve.radiocsirt.org/vuln/jvndb-2026-033235 https://cve.radiocsirt.org/vuln/rhsa-2022:6813 <p>chart.js: prototype pollution jackson-databind: denial of service via a large depth of nested objects immer: type confusion vulnerability can lead to a bypass of CVE-2020-28477 minimist: prototype pollution node-fetch: exposure of sensitive information to an unauthorized actor parse-url: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url cross-fetch: Exposure of Private Personal Information to an Unauthorized Actor drools: unsafe data deserialization in StreamUtils eventsource: Exposure of Sensitive Information Business-central: Possible XML External Entity Injection attack mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes xerces-j2: infinite loop when handling specially crafted XML document payloads artemis-commons: Apache ActiveMQ Artemis DoS node-forge: Signature verification leniency in checking `digestAlgorithm` structure can lead to signature forgery node-forge: Signature verification failing to check tailing garbage bytes can lead to signature forgery Moment.js: Path traversal in moment.locale postgresql-jdbc: Arbitrary File Write Vulnerability moment: inefficient parsing algorithm resulting in DoS</p> <p>chart.js: prototype pollution jackson-databind: denial of service via a large depth of nested objects immer: type confusion vulnerability can lead to a bypass of CVE-2020-28477 minimist: prototype pollution node-fetch: exposure of sensitive information to an unauthorized actor parse-url: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url cross-fetch: Exposure of Private Personal Information to an Unauthorized Actor drools: unsafe data deserialization in StreamUtils eventsource: Exposure of Sensitive Information Business-central: Possible XML External Entity Injection attack mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes xerces-j2: infinite loop when handling specially crafted XML document payloads artemis-commons: Apache ActiveMQ Artemis DoS node-forge: Signature verification leniency in checking `digestAlgorithm` structure can lead to signature forgery node-forge: Signature verification failing to check tailing garbage bytes can lead to signature forgery Moment.js: Path traversal in moment.locale postgresql-jdbc: Arbitrary File Write Vulnerability moment: inefficient parsing algorithm resulting in DoS</p> https://cve.radiocsirt.org/vuln/rhsa-2022:6813 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-7746 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: node-chart.js</p> <p>This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: node-chart.js</p> <p>This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-7746