https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 14:34:31 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-274052 EUVD-2026-274052 https://cve.radiocsirt.org/vuln/euvd-2026-274052 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3455 <p>Versions of the package mailparser before 3.9.3 are vulnerable to Cross-site Scripting (XSS) via the textToHtml() function due to the improper sanitisation of URLs in the email content. An attacker can execute arbitrary scripts in victim browsers by adding extra quote &#34; to the URL with embedded malicious JavaScript code.</p> <p>Versions of the package mailparser before 3.9.3 are vulnerable to Cross-site Scripting (XSS) via the textToHtml() function due to the improper sanitisation of URLs in the email content. An attacker can execute arbitrary scripts in victim browsers by adding extra quote &#34; to the URL with embedded malicious JavaScript code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-3455 https://cve.radiocsirt.org/vuln/ghsa-7gmj-h9xc-mcxc <p><strong>Affected:</strong> npm: mailparser</p> <p>Versions of the package mailparser before 3.9.3 are vulnerable to Cross-site Scripting (XSS) via the textToHtml() function due to the improper sanitisation of URLs in the email content. An attacker can execute arbitrary scripts in victim browsers by adding extra quote &#34; to the URL with embedded malicious JavaScript code.</p> <p><strong>Affected:</strong> npm: mailparser</p> <p>Versions of the package mailparser before 3.9.3 are vulnerable to Cross-site Scripting (XSS) via the textToHtml() function due to the improper sanitisation of URLs in the email content. An attacker can execute arbitrary scripts in victim browsers by adding extra quote &#34; to the URL with embedded malicious JavaScript code.</p> https://cve.radiocsirt.org/vuln/ghsa-7gmj-h9xc-mcxc https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0710 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0710