https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 05:29:24 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-213666 EUVD-2026-213666 https://cve.radiocsirt.org/vuln/euvd-2026-213666 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1767 <p>The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature of Snyk Advisor is to display the contents of a scanned package&#39;s Readme on its package health page. An attacker could create a package in NPM with an associated markdown README file containing XSS-able HTML tags. Upon Snyk Advisor importing the package, the XSS would run each time an end user browsed to the package&#39;s page on Snyk Advisor.</p> <p>The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature of Snyk Advisor is to display the contents of a scanned package&#39;s Readme on its package health page. An attacker could create a package in NPM with an associated markdown README file containing XSS-able HTML tags. Upon Snyk Advisor importing the package, the XSS would run each time an end user browsed to the package&#39;s page on Snyk Advisor.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-1767 https://cve.radiocsirt.org/vuln/ghsa-66mg-wfxj-x3xv <p>The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature of Snyk Advisor is to display the contents of a scanned package&#39;s Readme on its package health page. An attacker could create a package in NPM with an associated markdown README file containing XSS-able HTML tags. Upon Snyk Advisor importing the package, the XSS would run each time an end user browsed to the package&#39;s page on Snyk Advisor.</p> <p>The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature of Snyk Advisor is to display the contents of a scanned package&#39;s Readme on its package health page. An attacker could create a package in NPM with an associated markdown README file containing XSS-able HTML tags. Upon Snyk Advisor importing the package, the XSS would run each time an end user browsed to the package&#39;s page on Snyk Advisor.</p> https://cve.radiocsirt.org/vuln/ghsa-66mg-wfxj-x3xv https://cve.radiocsirt.org/vuln/gsd-2023-1767 gsd-2023-1767 https://cve.radiocsirt.org/vuln/gsd-2023-1767