https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 16:10:11 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-275971 EUVD-2026-275971 https://cve.radiocsirt.org/vuln/euvd-2026-275971 https://cve.radiocsirt.org/vuln/fkie_cve-2026-32251 <p>Tolgee is an open-source localization platform. Prior to 3.166.3, the XML parsers used for importing Android XML resources (.xml) and .resx files don&#39;t disable external entity processing. An authenticated user who can import translation files into a project can exploit this to read arbitrary files from the server and make server-side requests to internal services. This vulnerability is fixed in 3.166.3.</p> <p>Tolgee is an open-source localization platform. Prior to 3.166.3, the XML parsers used for importing Android XML resources (.xml) and .resx files don&#39;t disable external entity processing. An authenticated user who can import translation files into a project can exploit this to read arbitrary files from the server and make server-side requests to internal services. This vulnerability is fixed in 3.166.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-32251