Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 11:32:47 +0000 CVE-2023-23630 — Cross-site (XSS) vulnerability with Express API in Eta https://cve.radiocsirt.org/vuln/cve-2023-23630 <p><strong>Affected:</strong> eta-dev eta</p> <p>Eta is an embedded JS templating engine that works inside Node, Deno, and the browser. XSS attack - anyone using the Express API is impacted. The problem has been resolved. Users should upgrade to version 2.0.0. As a workaround, don&#39;t pass user supplied things directly to `res.render`.</p> <p><strong>Affected:</strong> eta-dev eta</p> <p>Eta is an embedded JS templating engine that works inside Node, Deno, and the browser. XSS attack - anyone using the Express API is impacted. The problem has been resolved. Users should upgrade to version 2.0.0. As a workaround, don&#39;t pass user supplied things directly to `res.render`.</p> https://cve.radiocsirt.org/vuln/cve-2023-23630