https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 12:28:11 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-221623 EUVD-2026-221623 https://cve.radiocsirt.org/vuln/euvd-2026-221623 https://cve.radiocsirt.org/vuln/fkie_cve-2023-23630 <p>Eta is an embedded JS templating engine that works inside Node, Deno, and the browser. XSS attack - anyone using the Express API is impacted. The problem has been resolved. Users should upgrade to version 2.0.0. As a workaround, don&#39;t pass user supplied things directly to `res.render`.</p> <p>Eta is an embedded JS templating engine that works inside Node, Deno, and the browser. XSS attack - anyone using the Express API is impacted. The problem has been resolved. Users should upgrade to version 2.0.0. As a workaround, don&#39;t pass user supplied things directly to `res.render`.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-23630 https://cve.radiocsirt.org/vuln/ghsa-xrh7-m5pp-39r6 <p><strong>Affected:</strong> npm: eta</p> <p>### Impact XSS attack - anyone using the Express API is impacted</p> <p>### Patches The problem has been resolved. Users should upgrade to version 2.0.0.</p> <p>### Workarounds Don&#39;t pass user supplied data directly to `res.renderFile`.</p> <p>### References _Are there any links users can visit to find out more?_ See https://github.com/eta-dev/eta/releases/tag/v2.0.0</p> <p><strong>Affected:</strong> npm: eta</p> <p>### Impact XSS attack - anyone using the Express API is impacted</p> <p>### Patches The problem has been resolved. Users should upgrade to version 2.0.0.</p> <p>### Workarounds Don&#39;t pass user supplied data directly to `res.renderFile`.</p> <p>### References _Are there any links users can visit to find out more?_ See https://github.com/eta-dev/eta/releases/tag/v2.0.0</p> https://cve.radiocsirt.org/vuln/ghsa-xrh7-m5pp-39r6 https://cve.radiocsirt.org/vuln/gsd-2023-23630 gsd-2023-23630 https://cve.radiocsirt.org/vuln/gsd-2023-23630