https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:34:23 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-325754 EUVD-2026-325754 https://cve.radiocsirt.org/vuln/euvd-2026-325754 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42224 <p>ipl/web is a set of common web components for php projects. Prior to versions 0.13.1 and 0.10.3, the vulnerability allows an attacker to inject malicious Javascript into a victim&#39;s browser to run it in the context of Icinga Web. The victim needs to visit a specifically prepared website and may have no immediate chance to notice any wrongdoing. This issue has been patched in versions 0.13.1 and 0.10.3.</p> <p>ipl/web is a set of common web components for php projects. Prior to versions 0.13.1 and 0.10.3, the vulnerability allows an attacker to inject malicious Javascript into a victim&#39;s browser to run it in the context of Icinga Web. The victim needs to visit a specifically prepared website and may have no immediate chance to notice any wrongdoing. This issue has been patched in versions 0.13.1 and 0.10.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-42224 https://cve.radiocsirt.org/vuln/ghsa-55wf-5m3q-6jjf <p><strong>Affected:</strong> Packagist: ipl/web</p> <p>### Impact The vulnerability allows an attacker to inject malicious Javascript into a victim&#39;s browser to run it in the context of Icinga Web. The victim needs to visit a specifically prepared website and may have no immediate chance to notice any wrongdoing.</p> <p>### Patches Version 0.13.1 includes a fix for this. It will be published as part of `icinga-php-library` version 0.19.2.</p> <p>### Workarounds Enable the Content-Security-Policy (CSP) in the general configuration of Icinga Web available since version 2.12.0.</p> <p>### References None</p> <p><strong>Affected:</strong> Packagist: ipl/web</p> <p>### Impact The vulnerability allows an attacker to inject malicious Javascript into a victim&#39;s browser to run it in the context of Icinga Web. The victim needs to visit a specifically prepared website and may have no immediate chance to notice any wrongdoing.</p> <p>### Patches Version 0.13.1 includes a fix for this. It will be published as part of `icinga-php-library` version 0.19.2.</p> <p>### Workarounds Enable the Content-Security-Policy (CSP) in the general configuration of Icinga Web available since version 2.12.0.</p> <p>### References None</p> https://cve.radiocsirt.org/vuln/ghsa-55wf-5m3q-6jjf https://cve.radiocsirt.org/vuln/opensuse-su-2026:10693-1 <p>icinga-php-library-0.19.2-1.1 on GA media</p> <p>icinga-php-library-0.19.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10693-1