https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:39:27 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-29443 cnvd-2019-29443 https://cve.radiocsirt.org/vuln/cnvd-2019-29443 https://cve.radiocsirt.org/vuln/euvd-2026-57186 EUVD-2026-57186 https://cve.radiocsirt.org/vuln/euvd-2026-57186 https://cve.radiocsirt.org/vuln/fkie_cve-2019-15532 <p>CyberChef before 8.31.2 allows XSS in core/operations/TextEncodingBruteForce.mjs.</p> <p>CyberChef before 8.31.2 allows XSS in core/operations/TextEncodingBruteForce.mjs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-15532 https://cve.radiocsirt.org/vuln/ghsa-jp6r-xcjj-5h7r <p><strong>Affected:</strong> npm: cyberchef</p> <p>Versions of `cyberchef` prior to 8.31.3 are vulnerable to Cross-Site Scripting. In `Text Encoding Brute Force` the table rows are created by concatenating the `value` variable unsanitized in the HTML code. If this variable is controlled by user input it allows attackers to execute arbitrary JavaScript in a victim&#39;s browser.</p> <p>## Recommendation</p> <p>Upgrade to version 8.31.3 or later.</p> <p><strong>Affected:</strong> npm: cyberchef</p> <p>Versions of `cyberchef` prior to 8.31.3 are vulnerable to Cross-Site Scripting. In `Text Encoding Brute Force` the table rows are created by concatenating the `value` variable unsanitized in the HTML code. If this variable is controlled by user input it allows attackers to execute arbitrary JavaScript in a victim&#39;s browser.</p> <p>## Recommendation</p> <p>Upgrade to version 8.31.3 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-jp6r-xcjj-5h7r https://cve.radiocsirt.org/vuln/gsd-2019-15532 gsd-2019-15532 https://cve.radiocsirt.org/vuln/gsd-2019-15532