Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:27:59 +0000 EUVD-2026-325666 https://cve.radiocsirt.org/vuln/euvd-2026-325666 EUVD-2026-325666 https://cve.radiocsirt.org/vuln/euvd-2026-325666 fkie_cve-2026-47345 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47345 <p>Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.</p> <p>Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-47345 GHSA-p5j5-4j3q-8mq8 — TYPO3 HTML Sanitizer allows Cross-site Scripting https://cve.radiocsirt.org/vuln/ghsa-p5j5-4j3q-8mq8 <p><strong>Affected:</strong> Packagist: typo3/html-sanitizer</p> <p>Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of `typo3/html-sanitizer` before version 2.3.2.</p> <p>Credits to Doyensec in collaboration with Claude and Anthropic Research for reporting this vulnerability.</p> <p><strong>Affected:</strong> Packagist: typo3/html-sanitizer</p> <p>Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of `typo3/html-sanitizer` before version 2.3.2.</p> <p>Credits to Doyensec in collaboration with Claude and Anthropic Research for reporting this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-p5j5-4j3q-8mq8 WID-SEC-W-2026-1835 — TYPO3 Core: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1835 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um Sicherheitsbeschränkungen zu umgehen, Benutzer auf schädliche Websites umzuleiten, beliebigen Code auszuführen, Berechtigungen zu eskalieren oder andere Auswirkungen zu verursachen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um Sicherheitsbeschränkungen zu umgehen, Benutzer auf schädliche Websites umzuleiten, beliebigen Code auszuführen, Berechtigungen zu eskalieren oder andere Auswirkungen zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1835