https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 12:57:13 +0000 https://cve.radiocsirt.org/vuln/cnvd-2026-02680 cnvd-2026-02680 https://cve.radiocsirt.org/vuln/cnvd-2026-02680 https://cve.radiocsirt.org/vuln/euvd-2026-204929 EUVD-2026-204929 https://cve.radiocsirt.org/vuln/euvd-2026-204929 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1783 <p>OrangeScrum version 2.0.11 allows an external attacker to remotely obtain AWS instance credentials. This is possible because the application does not properly validate the HTML content to be converted to PDF.</p> <p>OrangeScrum version 2.0.11 allows an external attacker to remotely obtain AWS instance credentials. This is possible because the application does not properly validate the HTML content to be converted to PDF.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-1783 https://cve.radiocsirt.org/vuln/ghsa-g9fp-4f3g-gqmr <p>OrangeScrum version 2.0.11 allows an external attacker to remotely obtain AWS instance credentials. This is possible because the application does not properly validate the HTML content to be converted to PDF.</p> <p>OrangeScrum version 2.0.11 allows an external attacker to remotely obtain AWS instance credentials. This is possible because the application does not properly validate the HTML content to be converted to PDF.</p> https://cve.radiocsirt.org/vuln/ghsa-g9fp-4f3g-gqmr https://cve.radiocsirt.org/vuln/gsd-2023-1783 gsd-2023-1783 https://cve.radiocsirt.org/vuln/gsd-2023-1783