Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:23:24 +0000 EUVD-2026-28211 https://cve.radiocsirt.org/vuln/euvd-2026-28211 EUVD-2026-28211 https://cve.radiocsirt.org/vuln/euvd-2026-28211 fkie_cve-2021-32831 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32831 <p>Total.js framework (npm package total.js) is a framework for Node.js platfrom written in pure JavaScript similar to PHP&#39;s Laravel or Python&#39;s Django or ASP.NET MVC. In total.js framework before version 3.4.9, calling the utils.set function with user-controlled values leads to code-injection. This can cause a variety of impacts that include arbitrary code execution. This is fixed in version 3.4.9.</p> <p>Total.js framework (npm package total.js) is a framework for Node.js platfrom written in pure JavaScript similar to PHP&#39;s Laravel or Python&#39;s Django or ASP.NET MVC. In total.js framework before version 3.4.9, calling the utils.set function with user-controlled values leads to code-injection. This can cause a variety of impacts that include arbitrary code execution. This is fixed in version 3.4.9.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-32831 GHSA-vwhc-pww7-72x6 — Code Injection in total.js https://cve.radiocsirt.org/vuln/ghsa-vwhc-pww7-72x6 <p><strong>Affected:</strong> npm: total.js</p> <p>Total.js framework (npm package total.js) is a framework for Node.js platfrom written in pure JavaScript similar to PHP&#39;s Laravel or Python&#39;s Django or ASP.NET MVC. In total.js framework before version 3.4.9, calling the utils.set function with user-controlled values leads to code-injection. This can cause a variety of impacts that include arbitrary code execution. This is fixed in version 3.4.9.</p> <p><strong>Affected:</strong> npm: total.js</p> <p>Total.js framework (npm package total.js) is a framework for Node.js platfrom written in pure JavaScript similar to PHP&#39;s Laravel or Python&#39;s Django or ASP.NET MVC. In total.js framework before version 3.4.9, calling the utils.set function with user-controlled values leads to code-injection. This can cause a variety of impacts that include arbitrary code execution. This is fixed in version 3.4.9.</p> https://cve.radiocsirt.org/vuln/ghsa-vwhc-pww7-72x6 gsd-2021-32831 https://cve.radiocsirt.org/vuln/gsd-2021-32831 gsd-2021-32831 https://cve.radiocsirt.org/vuln/gsd-2021-32831