https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 22:44:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-210504 EUVD-2026-210504 https://cve.radiocsirt.org/vuln/euvd-2026-210504 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32325 <p>PostHog-js is a library to interface with the PostHog analytics tool. Versions prior to 1.57.2 have the potential for cross-site scripting. Problem has been patched in 1.57.2. Users are advised to upgrade. Users unable to upgrade should ensure that their Content Security Policy is in place.</p> <p>PostHog-js is a library to interface with the PostHog analytics tool. Versions prior to 1.57.2 have the potential for cross-site scripting. Problem has been patched in 1.57.2. Users are advised to upgrade. Users unable to upgrade should ensure that their Content Security Policy is in place.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-32325 https://cve.radiocsirt.org/vuln/ghsa-8775-5hwv-wr6v <p><strong>Affected:</strong> npm: posthog-js</p> <p>### Impact</p> <p>Potential for cross-site scripting in `posthog-js`.</p> <p>### Patches</p> <p>The problem has been patched in `posthog-js` version 1.57.2.</p> <p>### Workarounds</p> <p>- This isn&#39;t an issue for sites that have a Content Security Policy in place. - Using the HTML tracking snippet on PostHog Cloud always guarantees the latest version of the library – in that case no action is required to upgrade to the patched version.</p> <p>### References</p> <p>We will publish details of the vulnerability in 30 days as per our [security policy](https://posthog.com/handbook/company/security#policies).</p> <p><strong>Affected:</strong> npm: posthog-js</p> <p>### Impact</p> <p>Potential for cross-site scripting in `posthog-js`.</p> <p>### Patches</p> <p>The problem has been patched in `posthog-js` version 1.57.2.</p> <p>### Workarounds</p> <p>- This isn&#39;t an issue for sites that have a Content Security Policy in place. - Using the HTML tracking snippet on PostHog Cloud always guarantees the latest version of the library – in that case no action is required to upgrade to the patched version.</p> <p>### References</p> <p>We will publish details of the vulnerability in 30 days as per our [security policy](https://posthog.com/handbook/company/security#policies).</p> https://cve.radiocsirt.org/vuln/ghsa-8775-5hwv-wr6v https://cve.radiocsirt.org/vuln/gsd-2023-32325 gsd-2023-32325 https://cve.radiocsirt.org/vuln/gsd-2023-32325