https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 21:52:14 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-4637 EUVD-2026-4637 https://cve.radiocsirt.org/vuln/euvd-2026-4637 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29191 <p>gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The links page (`links.html`) appends the `src` GET parameter (`[0]`) in all of its links for 1-click previews. The context in which `src` is being appended is `innerHTML` (`[1]`), which will insert the text as HTML. Commit 3b3d5b033aac3a019af64f83dec84f70ed2c8aba contains a patch for the issue.</p> <p>gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The links page (`links.html`) appends the `src` GET parameter (`[0]`) in all of its links for 1-click previews. The context in which `src` is being appended is `innerHTML` (`[1]`), which will insert the text as HTML. Commit 3b3d5b033aac3a019af64f83dec84f70ed2c8aba contains a patch for the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-29191 https://cve.radiocsirt.org/vuln/ghsa-wv8x-3w6r-6h7v <p><strong>Affected:</strong> Go: github.com/AlexxIT/go2rtc</p> <p>gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The links page (`links.html`) appends the `src` GET parameter (`[0]`) in all of its links for 1-click previews. The context in which `src` is being appended is `innerHTML` (`[1]`), which will insert the text as HTML. Commit 3b3d5b033aac3a019af64f83dec84f70ed2c8aba contains a patch for the issue.</p> <p><strong>Affected:</strong> Go: github.com/AlexxIT/go2rtc</p> <p>gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The links page (`links.html`) appends the `src` GET parameter (`[0]`) in all of its links for 1-click previews. The context in which `src` is being appended is `innerHTML` (`[1]`), which will insert the text as HTML. Commit 3b3d5b033aac3a019af64f83dec84f70ed2c8aba contains a patch for the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-wv8x-3w6r-6h7v https://cve.radiocsirt.org/vuln/gsd-2024-29191 gsd-2024-29191 https://cve.radiocsirt.org/vuln/gsd-2024-29191