https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:17:40 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0933 certfr-2026-avi-0933 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0933 https://cve.radiocsirt.org/vuln/euvd-2026-324481 EUVD-2026-324481 https://cve.radiocsirt.org/vuln/euvd-2026-324481 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33245 <p>React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router&#39;s unstable React Server Components (RSC) APIs, there is a potential client-side Cross-Site Scripting (XSS) vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not impact applications that are not using the unstable RSC APIs in React Router. This is patched in version 7.13.2.</p> <p>React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router&#39;s unstable React Server Components (RSC) APIs, there is a potential client-side Cross-Site Scripting (XSS) vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not impact applications that are not using the unstable RSC APIs in React Router. This is patched in version 7.13.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-33245 https://cve.radiocsirt.org/vuln/ghsa-8646-j5j9-6r62 <p><strong>Affected:</strong> npm: react-router</p> <p>When using React Router v7&#39;s unstable RSC APIs, there exists a potential client-side XSS issue in the RSC redirect handling if redirects are coming from untrusted sources</p> <p>&gt; [!NOTE] &gt; This only impacts your application if you are using the unstable RSC APIs in React Router.</p> <p><strong>Affected:</strong> npm: react-router</p> <p>When using React Router v7&#39;s unstable RSC APIs, there exists a potential client-side XSS issue in the RSC redirect handling if redirects are coming from untrusted sources</p> <p>&gt; [!NOTE] &gt; This only impacts your application if you are using the unstable RSC APIs in React Router.</p> https://cve.radiocsirt.org/vuln/ghsa-8646-j5j9-6r62 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11680-1 <p>agama-web-ui-24+0.a836cced5-52.1 on GA media</p> <p>agama-web-ui-24+0.a836cced5-52.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11680-1 https://cve.radiocsirt.org/vuln/rhsa-2026:34456 <p>mlflow: mlflow: Arbitrary file read via bypassed source path validation python-transformers: python-transformers: Arbitrary code execution due to overridden trust_remote_code setting python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite react-router: React Router: Cross-Site Scripting vulnerability via untrusted React Server Component redirects aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load() starlette: Starlette: Security restriction bypass via malformed HTTP Host header</p> <p>mlflow: mlflow: Arbitrary file read via bypassed source path validation python-transformers: python-transformers: Arbitrary code execution due to overridden trust_remote_code setting python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite react-router: React Router: Cross-Site Scripting vulnerability via untrusted React Server Component redirects aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load() starlette: Starlette: Security restriction bypass via malformed HTTP Host header</p> https://cve.radiocsirt.org/vuln/rhsa-2026:34456