Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 22:56:08 +0000 cnvd-2018-11448 https://cve.radiocsirt.org/vuln/cnvd-2018-11448 cnvd-2018-11448 https://cve.radiocsirt.org/vuln/cnvd-2018-11448 EUVD-2026-177281 https://cve.radiocsirt.org/vuln/euvd-2026-177281 EUVD-2026-177281 https://cve.radiocsirt.org/vuln/euvd-2026-177281 fkie_cve-2018-3726 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3726 <p>crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.</p> <p>crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-3726 GHSA-h24f-9mm4-w336 — Cross-site Scripting (XSS) - Stored in crud-file-server https://cve.radiocsirt.org/vuln/ghsa-h24f-9mm4-w336 <p><strong>Affected:</strong> npm: crud-file-server</p> <p>Versions of `crud-file-server` before 0.8.0 are vulnerable to stored cross-site scripting (XSS). This is due to insufficient santiziation of filenames when directory index is served by `crud-file-server`.</p> <p>## Recommendation</p> <p>Update to version 0.8.0 or later.</p> <p><strong>Affected:</strong> npm: crud-file-server</p> <p>Versions of `crud-file-server` before 0.8.0 are vulnerable to stored cross-site scripting (XSS). This is due to insufficient santiziation of filenames when directory index is served by `crud-file-server`.</p> <p>## Recommendation</p> <p>Update to version 0.8.0 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-h24f-9mm4-w336 gsd-2018-3726 https://cve.radiocsirt.org/vuln/gsd-2018-3726 gsd-2018-3726 https://cve.radiocsirt.org/vuln/gsd-2018-3726