https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:18:32 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-238752 EUVD-2026-238752 https://cve.radiocsirt.org/vuln/euvd-2026-238752 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25849 <p>The package joyqi/hyper-down from 0.0.0 are vulnerable to Cross-site Scripting (XSS) because the module of parse markdown does not filter the href attribute very well.</p> <p>The package joyqi/hyper-down from 0.0.0 are vulnerable to Cross-site Scripting (XSS) because the module of parse markdown does not filter the href attribute very well.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-25849 https://cve.radiocsirt.org/vuln/ghsa-4r9g-w48q-8jwm <p><strong>Affected:</strong> Packagist: joyqi/hyper-down</p> <p>HyperDown is a markdown parser written for the Chinese website SegmentFault. Improper validation of the href attribute allows for Cross-site Scripting. At publication there are no patched versions, and no known workarounds.</p> <p><strong>Affected:</strong> Packagist: joyqi/hyper-down</p> <p>HyperDown is a markdown parser written for the Chinese website SegmentFault. Improper validation of the href attribute allows for Cross-site Scripting. At publication there are no patched versions, and no known workarounds.</p> https://cve.radiocsirt.org/vuln/ghsa-4r9g-w48q-8jwm https://cve.radiocsirt.org/vuln/gsd-2022-25849 gsd-2022-25849 https://cve.radiocsirt.org/vuln/gsd-2022-25849