https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 07:48:20 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-28146 EUVD-2026-28146 https://cve.radiocsirt.org/vuln/euvd-2026-28146 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32830 <p>The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. All versions of this package are vulnerable as of the writing of this CVE.</p> <p>The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. All versions of this package are vulnerable as of the writing of this CVE.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-32830 https://cve.radiocsirt.org/vuln/ghsa-8c3f-x5f9-6h62 <p><strong>Affected:</strong> npm: @diez/generation</p> <p>The `@diez/generation` npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. All versions of this package are vulnerable as of the writing of this CVE.</p> <p><strong>Affected:</strong> npm: @diez/generation</p> <p>The `@diez/generation` npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. All versions of this package are vulnerable as of the writing of this CVE.</p> https://cve.radiocsirt.org/vuln/ghsa-8c3f-x5f9-6h62 https://cve.radiocsirt.org/vuln/gsd-2021-32830 gsd-2021-32830 https://cve.radiocsirt.org/vuln/gsd-2021-32830