https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 23:36:21 +0000 https://cve.radiocsirt.org/vuln/fkie_cve-2022-39390 <p>Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-36534. Reason: This candidate is a reservation duplicate of CVE-2020-36534. Notes: All CVE users should reference CVE-2020-36534 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.</p> <p>Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-36534. Reason: This candidate is a reservation duplicate of CVE-2020-36534. Notes: All CVE users should reference CVE-2020-36534 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-39390 https://cve.radiocsirt.org/vuln/ghsa-r4jg-5v89-9v62 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> npm: octocat.js</p> <p>## Withdrawn</p> <p>This advisory has been withdrawn because it is a test.</p> <p>## Original Description</p> <p>### Impact Users can include their own images for accessories via provided URLs. These URLs are not validated and can result in execution of injected code.</p> <p>### Patches This vulnerability was fixed in version 1.2 of octocat.js</p> <p>### Workarounds Directly exposing rendered images to a website can introduce the vulnerability to users. To avoid, writing an image to disk then using that image in an image element in HTML mitigates the risk.</p> <p>### References To render the file correctly, see documentation at `readme.md`</p> <p>### For more information If you have any questions or comments about this advisory: * Open an issue in [the octo.js repository](http://github.com/octocademy/octocat.js/issues)</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> npm: octocat.js</p> <p>## Withdrawn</p> <p>This advisory has been withdrawn because it is a test.</p> <p>## Original Description</p> <p>### Impact Users can include their own images for accessories via provided URLs. These URLs are not validated and can result in execution of injected code.</p> <p>### Patches This vulnerability was fixed in version 1.2 of octocat.js</p> <p>### Workarounds Directly exposing rendered images to a website can introduce the vulnerability to users. To avoid, writing an image to disk then using that image in an image element in HTML mitigates the risk.</p> <p>### References To render the file correctly, see documentation at `readme.md`</p> <p>### For more information If you have any questions or comments about this advisory: * Open an issue in [the octo.js repository](http://github.com/octocademy/octocat.js/issues)</p> https://cve.radiocsirt.org/vuln/ghsa-r4jg-5v89-9v62 https://cve.radiocsirt.org/vuln/gsd-2022-39390 gsd-2022-39390 https://cve.radiocsirt.org/vuln/gsd-2022-39390