https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:06:11 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0481 certfr-2025-avi-0481 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0481 https://cve.radiocsirt.org/vuln/euvd-2026-382011 EUVD-2026-382011 https://cve.radiocsirt.org/vuln/euvd-2026-382011 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11831 <p>A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.</p> <p>A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-11831 https://cve.radiocsirt.org/vuln/ghsa-76p7-773f-r4q5 <p><strong>Affected:</strong> npm: serialize-javascript</p> <p>A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.</p> <p><strong>Affected:</strong> npm: serialize-javascript</p> <p>A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.</p> https://cve.radiocsirt.org/vuln/ghsa-76p7-773f-r4q5 https://cve.radiocsirt.org/vuln/msrc_cve-2024-11831 msrc_CVE-2024-11831 https://cve.radiocsirt.org/vuln/msrc_cve-2024-11831 https://cve.radiocsirt.org/vuln/rhba-2025:0304 <p>npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript dotnet: .NET and Visual Studio Remote Code Execution Vulnerability dotnet: .NET Elevation of Privilege Vulnerability dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability</p> <p>npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript dotnet: .NET and Visual Studio Remote Code Execution Vulnerability dotnet: .NET Elevation of Privilege Vulnerability dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability</p> https://cve.radiocsirt.org/vuln/rhba-2025:0304 https://cve.radiocsirt.org/vuln/rhsa-2025:10853 <p>npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript http-proxy-middleware: http-proxy-middleware: Denial of Service via unhandled error during path matching elliptic: Missing Validation in Elliptic&#39;s EDDSA Signature Verification</p> <p>npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript http-proxy-middleware: http-proxy-middleware: Denial of Service via unhandled error during path matching elliptic: Missing Validation in Elliptic&#39;s EDDSA Signature Verification</p> https://cve.radiocsirt.org/vuln/rhsa-2025:10853 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-11831 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: node-serialize-javascript, Ubuntu:24.04:LTS: node-serialize-javascript, Ubuntu:25.10: node-serialize-javascript, Ubuntu:26.04:LTS: node-serialize-javascript</p> <p>A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: node-serialize-javascript, Ubuntu:24.04:LTS: node-serialize-javascript, Ubuntu:25.10: node-serialize-javascript, Ubuntu:26.04:LTS: node-serialize-javascript</p> <p>A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-11831 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2584 <p>Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux Ceph Storage ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux Ceph Storage ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2584