Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 16:27:50 +0000 cnvd-2022-88818 https://cve.radiocsirt.org/vuln/cnvd-2022-88818 cnvd-2022-88818 https://cve.radiocsirt.org/vuln/cnvd-2022-88818 EUVD-2026-240791 https://cve.radiocsirt.org/vuln/euvd-2026-240791 EUVD-2026-240791 https://cve.radiocsirt.org/vuln/euvd-2026-240791 fkie_cve-2022-21169 https://cve.radiocsirt.org/vuln/fkie_cve-2022-21169 <p>The package express-xss-sanitizer before 1.1.3 are vulnerable to Prototype Pollution via the allowedTags attribute, allowing the attacker to bypass xss sanitization.</p> <p>The package express-xss-sanitizer before 1.1.3 are vulnerable to Prototype Pollution via the allowedTags attribute, allowing the attacker to bypass xss sanitization.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-21169 GHSA-grjp-4jmr-mjcw — express-xss-sanitizer vulnerable to Prototype Pollution via allowedTags attribute https://cve.radiocsirt.org/vuln/ghsa-grjp-4jmr-mjcw <p><strong>Affected:</strong> npm: express-xss-sanitizer</p> <p>The package express-xss-sanitizer before 1.1.3 is vulnerable to Prototype Pollution via the `allowedTags` attribute, allowing the attacker to bypass xss sanitization.</p> <p><strong>Affected:</strong> npm: express-xss-sanitizer</p> <p>The package express-xss-sanitizer before 1.1.3 is vulnerable to Prototype Pollution via the `allowedTags` attribute, allowing the attacker to bypass xss sanitization.</p> https://cve.radiocsirt.org/vuln/ghsa-grjp-4jmr-mjcw gsd-2022-21169 https://cve.radiocsirt.org/vuln/gsd-2022-21169 gsd-2022-21169 https://cve.radiocsirt.org/vuln/gsd-2022-21169