https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:10:31 +0000 https://cve.radiocsirt.org/vuln/cve-2025-31483 <p><strong>Affected:</strong> miniflux v2</p> <p>Miniflux is a feed reader. Due to a weak Content Security Policy on the /proxy/* route, an attacker can bypass the CSP of the media proxy and execute cross-site scripting when opening external images in a new tab/window. To mitigate the vulnerability, the CSP for the media proxy has been changed from default-src &#39;self&#39; to default-src &#39;none&#39;; form-action &#39;none&#39;; sandbox;. This vulnerability is fixed in 2.2.7.</p> <p><strong>Affected:</strong> miniflux v2</p> <p>Miniflux is a feed reader. Due to a weak Content Security Policy on the /proxy/* route, an attacker can bypass the CSP of the media proxy and execute cross-site scripting when opening external images in a new tab/window. To mitigate the vulnerability, the CSP for the media proxy has been changed from default-src &#39;self&#39; to default-src &#39;none&#39;; form-action &#39;none&#39;; sandbox;. This vulnerability is fixed in 2.2.7.</p> https://cve.radiocsirt.org/vuln/cve-2025-31483