https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 03:04:48 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-262492 EUVD-2026-262492 https://cve.radiocsirt.org/vuln/euvd-2026-262492 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8101 <p>Improperly Controlled Modification of Object Prototype Attributes (&#39;Prototype Pollution&#39;) vulnerability in Linkify (linkifyjs) allows XSS Targeting HTML Attributes and Manipulating User-Controlled Variables.This issue affects Linkify: from 4.3.1 before 4.3.2.</p> <p>Improperly Controlled Modification of Object Prototype Attributes (&#39;Prototype Pollution&#39;) vulnerability in Linkify (linkifyjs) allows XSS Targeting HTML Attributes and Manipulating User-Controlled Variables.This issue affects Linkify: from 4.3.1 before 4.3.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-8101 https://cve.radiocsirt.org/vuln/ghsa-95jq-xph2-cx9h <p><strong>Affected:</strong> npm: linkifyjs</p> <p>Prototype Pollution in internal `assign()` helper in Linkify allows remote attackers to execute arbitrary JavaScript (Stored or Reflected XSS) via injection of event handlers through unfiltered proto property. This issue affects Linkify version 4.3.1 and is fixed in 4.3.2.</p> <p><strong>Affected:</strong> npm: linkifyjs</p> <p>Prototype Pollution in internal `assign()` helper in Linkify allows remote attackers to execute arbitrary JavaScript (Stored or Reflected XSS) via injection of event handlers through unfiltered proto property. This issue affects Linkify version 4.3.1 and is fixed in 4.3.2.</p> https://cve.radiocsirt.org/vuln/ghsa-95jq-xph2-cx9h