https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:45:37 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0512 certfr-2025-avi-0512 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0512 https://cve.radiocsirt.org/vuln/cleanstart-2026-bx02469 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: jitsucom-jitsu</p> <p>Package jitsucom-jitsu version 2.10.0-r0 fixes 5 vulnerabilities: CVE-2026-3449, ghsa-vpq2-c234-7xj6, ghsa-c7w3-x93f-qmm8, CVE-2024-53382, ghsa-x7hr-w5r2-h6wg</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: jitsucom-jitsu</p> <p>Package jitsucom-jitsu version 2.10.0-r0 fixes 5 vulnerabilities: CVE-2026-3449, ghsa-vpq2-c234-7xj6, ghsa-c7w3-x93f-qmm8, CVE-2024-53382, ghsa-x7hr-w5r2-h6wg</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-bx02469 https://cve.radiocsirt.org/vuln/euvd-2026-220336 EUVD-2026-220336 https://cve.radiocsirt.org/vuln/euvd-2026-220336 https://cve.radiocsirt.org/vuln/fkie_cve-2024-53382 <p>Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.</p> <p>Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-53382 https://cve.radiocsirt.org/vuln/ghsa-x7hr-w5r2-h6wg <p><strong>Affected:</strong> npm: prismjs</p> <p>Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.</p> <p><strong>Affected:</strong> npm: prismjs</p> <p>Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.</p> https://cve.radiocsirt.org/vuln/ghsa-x7hr-w5r2-h6wg https://cve.radiocsirt.org/vuln/rhsa-2025:11749 <p>moby: classic builder cache poisoning golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html prismjs: DOM Clobbering vulnerability within the Prism library&#39;s prism-autoloader plugin crypto/x509: ParsePKCS1PrivateKey panic with partial keys in crypto/x509 golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws net/http: Request smuggling due to acceptance of invalid chunked data in net/http golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing</p> <p>moby: classic builder cache poisoning golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html prismjs: DOM Clobbering vulnerability within the Prism library&#39;s prism-autoloader plugin crypto/x509: ParsePKCS1PrivateKey panic with partial keys in crypto/x509 golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws net/http: Request smuggling due to acceptance of invalid chunked data in net/http golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing</p> https://cve.radiocsirt.org/vuln/rhsa-2025:11749 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-53382 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: node-prismjs, Ubuntu:22.04:LTS: node-prismjs, Ubuntu:24.04:LTS: node-prismjs, Ubuntu:25.10: node-prismjs, Ubuntu:26.04:LTS: node-prismjs</p> <p>Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: node-prismjs, Ubuntu:22.04:LTS: node-prismjs, Ubuntu:24.04:LTS: node-prismjs, Ubuntu:25.10: node-prismjs, Ubuntu:26.04:LTS: node-prismjs</p> <p>Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-53382 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1399 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM Maximo Asset Management ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM Maximo Asset Management ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1399