https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:07:01 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-241947 EUVD-2026-241947 https://cve.radiocsirt.org/vuln/euvd-2026-241947 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1461 <p>Improper neutralization of the value of the &#39;eventMoreText&#39; property of the &#39;VCalendar&#39; component in Vuetify allows unsanitized HTML to be inserted into the page. This can lead to a  Cross-Site Scripting (XSS) https://owasp.org/www-community/attacks/xss  attack. The vulnerability occurs because the default Vuetify translator will return the translation key as the translation, if it can&#39;t find an actual translation.</p> <p>This issue affects Vuetify versions greater than or equal to 2.0.0 and less than 3.0.0.</p> <p>Note: Version 2.x of Vuetify is End-of-Life and will not receive any updates to address this issue. For more information see here https://v2.vuetifyjs.com/en/about/eol/ .</p> <p>Improper neutralization of the value of the &#39;eventMoreText&#39; property of the &#39;VCalendar&#39; component in Vuetify allows unsanitized HTML to be inserted into the page. This can lead to a  Cross-Site Scripting (XSS) https://owasp.org/www-community/attacks/xss  attack. The vulnerability occurs because the default Vuetify translator will return the translation key as the translation, if it can&#39;t find an actual translation.</p> <p>This issue affects Vuetify versions greater than or equal to 2.0.0 and less than 3.0.0.</p> <p>Note: Version 2.x of Vuetify is End-of-Life and will not receive any updates to address this issue. For more information see here https://v2.vuetifyjs.com/en/about/eol/ .</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-1461 https://cve.radiocsirt.org/vuln/ghsa-vr9v-xw27-65fc <p>Improper neutralization of the value of the &#39;eventMoreText&#39; property of the &#39;VCalendar&#39; component in Vuetify allows unsanitized HTML to be inserted into the page. This can lead to a  Cross-Site Scripting (XSS) https://owasp.org/www-community/attacks/xss  attack. The vulnerability occurs because the default Vuetify translator will return the translation key as the translation, if it can&#39;t find an actual translation.</p> <p>This issue affects Vuetify versions greater than or equal to 2.0.0 and less than 3.0.0.</p> <p>Note: Version 2.x of Vuetify is End-of-Life and will not receive any updates to address this issue. For more information see here https://v2.vuetifyjs.com/en/about/eol/ .</p> <p>Improper neutralization of the value of the &#39;eventMoreText&#39; property of the &#39;VCalendar&#39; component in Vuetify allows unsanitized HTML to be inserted into the page. This can lead to a  Cross-Site Scripting (XSS) https://owasp.org/www-community/attacks/xss  attack. The vulnerability occurs because the default Vuetify translator will return the translation key as the translation, if it can&#39;t find an actual translation.</p> <p>This issue affects Vuetify versions greater than or equal to 2.0.0 and less than 3.0.0.</p> <p>Note: Version 2.x of Vuetify is End-of-Life and will not receive any updates to address this issue. For more information see here https://v2.vuetifyjs.com/en/about/eol/ .</p> https://cve.radiocsirt.org/vuln/ghsa-vr9v-xw27-65fc