https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:52:12 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-241780 EUVD-2026-241780 https://cve.radiocsirt.org/vuln/euvd-2026-241780 https://cve.radiocsirt.org/vuln/fkie_cve-2024-24556 <p>urql is a GraphQL client that exposes a set of helpers for several frameworks. The `@urql/next` package is vulnerable to XSS. To exploit this an attacker would need to ensure that the response returns `html` tags and that the web-application is using streamed responses (non-RSC). This vulnerability is due to improper escaping of html-like characters in the response-stream. To fix this vulnerability upgrade to version 1.1.1</p> <p>urql is a GraphQL client that exposes a set of helpers for several frameworks. The `@urql/next` package is vulnerable to XSS. To exploit this an attacker would need to ensure that the response returns `html` tags and that the web-application is using streamed responses (non-RSC). This vulnerability is due to improper escaping of html-like characters in the response-stream. To fix this vulnerability upgrade to version 1.1.1</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-24556 https://cve.radiocsirt.org/vuln/ghsa-qhjf-hm5j-335w <p><strong>Affected:</strong> npm: @urql/next</p> <p>## impact</p> <p>The `@urql/next` package is vulnerable to XSS. To exploit this an attacker would need to ensure that the response returns `html` tags and that the web-application is using streamed responses (non-RSC). This vulnerability is due to improper escaping of html-like characters in the response-stream.</p> <p>To fix this vulnerability upgrade to version 1.1.1</p> <p><strong>Affected:</strong> npm: @urql/next</p> <p>## impact</p> <p>The `@urql/next` package is vulnerable to XSS. To exploit this an attacker would need to ensure that the response returns `html` tags and that the web-application is using streamed responses (non-RSC). This vulnerability is due to improper escaping of html-like characters in the response-stream.</p> <p>To fix this vulnerability upgrade to version 1.1.1</p> https://cve.radiocsirt.org/vuln/ghsa-qhjf-hm5j-335w https://cve.radiocsirt.org/vuln/gsd-2024-24556 gsd-2024-24556 https://cve.radiocsirt.org/vuln/gsd-2024-24556