https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 18:06:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-32137 EUVD-2026-32137 https://cve.radiocsirt.org/vuln/euvd-2026-32137 https://cve.radiocsirt.org/vuln/fkie_cve-2021-42560 <p>An issue was discovered in CALDERA 2.9.0. The Debrief plugin receives base64 encoded &#34;SVG&#34; parameters when generating a PDF document. These SVG documents are parsed in an unsafe manner and can be leveraged for XXE attacks (e.g., File Exfiltration, Server Side Request Forgery, Out of Band Exfiltration, etc.).</p> <p>An issue was discovered in CALDERA 2.9.0. The Debrief plugin receives base64 encoded &#34;SVG&#34; parameters when generating a PDF document. These SVG documents are parsed in an unsafe manner and can be leveraged for XXE attacks (e.g., File Exfiltration, Server Side Request Forgery, Out of Band Exfiltration, etc.).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-42560 https://cve.radiocsirt.org/vuln/ghsa-c676-8v9r-pxgj <p>An issue was discovered in CALDERA 2.9.0. The Debrief plugin receives base64 encoded &#34;SVG&#34; parameters when generating a PDF document. These SVG documents are parsed in an unsafe manner and can be leveraged for XXE attacks (e.g., File Exfiltration, Server Side Request Forgery, Out of Band Exfiltration, etc.).</p> <p>An issue was discovered in CALDERA 2.9.0. The Debrief plugin receives base64 encoded &#34;SVG&#34; parameters when generating a PDF document. These SVG documents are parsed in an unsafe manner and can be leveraged for XXE attacks (e.g., File Exfiltration, Server Side Request Forgery, Out of Band Exfiltration, etc.).</p> https://cve.radiocsirt.org/vuln/ghsa-c676-8v9r-pxgj https://cve.radiocsirt.org/vuln/gsd-2021-42560 gsd-2021-42560 https://cve.radiocsirt.org/vuln/gsd-2021-42560