https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 16:37:14 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-245587 EUVD-2026-245587 https://cve.radiocsirt.org/vuln/euvd-2026-245587 https://cve.radiocsirt.org/vuln/fkie_cve-2025-49590 <p>CryptPad is a collaboration suite. Prior to version 2025.3.0, the &#34;Link Bouncer&#34; functionality attempts to filter javascript URIs to prevent Cross-Site Scripting (XSS), however this can be bypassed. There is an &#34;early allow&#34; code path that happens before the URI&#39;s protocol/scheme is checked, which a maliciously crafted URI can follow. This issue has been patched in version 2025.3.0.</p> <p>CryptPad is a collaboration suite. Prior to version 2025.3.0, the &#34;Link Bouncer&#34; functionality attempts to filter javascript URIs to prevent Cross-Site Scripting (XSS), however this can be bypassed. There is an &#34;early allow&#34; code path that happens before the URI&#39;s protocol/scheme is checked, which a maliciously crafted URI can follow. This issue has been patched in version 2025.3.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-49590