https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 22:24:48 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-44973 cnvd-2021-44973 https://cve.radiocsirt.org/vuln/cnvd-2021-44973 https://cve.radiocsirt.org/vuln/euvd-2026-20969 EUVD-2026-20969 https://cve.radiocsirt.org/vuln/euvd-2026-20969 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3529 <p>A flaw was found in noobaa-core in versions before 5.7.0. This flaw results in the name of an arbitrarily URL being copied into an HTML document as plain text between tags, including potentially a payload script. The input was echoed unmodified in the application response, resulting in arbitrary JavaScript being injected into an application&#39;s response. The highest threat to the system is for confidentiality, availability, and integrity.</p> <p>A flaw was found in noobaa-core in versions before 5.7.0. This flaw results in the name of an arbitrarily URL being copied into an HTML document as plain text between tags, including potentially a payload script. The input was echoed unmodified in the application response, resulting in arbitrary JavaScript being injected into an application&#39;s response. The highest threat to the system is for confidentiality, availability, and integrity.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3529 https://cve.radiocsirt.org/vuln/ghsa-cr32-cm8v-9pww <p>A flaw was found in noobaa-core in versions before 5.7.0. This flaw results in the name of an arbitrarily URL being copied into an HTML document as plain text between tags, including potentially a payload script. The input was echoed unmodified in the application response, resulting in arbitrary JavaScript being injected into an application&#39;s response. The highest threat to the system is for confidentiality, availability, and integrity.</p> <p>A flaw was found in noobaa-core in versions before 5.7.0. This flaw results in the name of an arbitrarily URL being copied into an HTML document as plain text between tags, including potentially a payload script. The input was echoed unmodified in the application response, resulting in arbitrary JavaScript being injected into an application&#39;s response. The highest threat to the system is for confidentiality, availability, and integrity.</p> https://cve.radiocsirt.org/vuln/ghsa-cr32-cm8v-9pww https://cve.radiocsirt.org/vuln/gsd-2021-3529 gsd-2021-3529 https://cve.radiocsirt.org/vuln/gsd-2021-3529 https://cve.radiocsirt.org/vuln/rhba-2021:3003 <p>kubernetes: Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel &gt;= 9 noobaa-core: Cross-site scripting vulnerability with noobaa management URL golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader</p> <p>kubernetes: Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel &gt;= 9 noobaa-core: Cross-site scripting vulnerability with noobaa management URL golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader</p> https://cve.radiocsirt.org/vuln/rhba-2021:3003