https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:54:38 +0000 https://cve.radiocsirt.org/vuln/cve-2026-27627 <p><strong>Affected:</strong> karakeep-app karakeep</p> <p>Karakeep is a elf-hostable bookmark-everything app. In version 0.30.0, when the Reddit metascraper plugin returns `readableContentHtml`, the HTML parsing subprocess uses it directly without running it through DOMPurify. Every other content source in the crawler goes through Readability + DOMPurify, but the Reddit path skips both. Since this content ends up in `dangerouslySetInnerHTML` in the reader view, any malicious HTML in the Reddit response gets executed in the user&#39;s browser. Version 0.31.0 contains a patch for this issue.</p> <p><strong>Affected:</strong> karakeep-app karakeep</p> <p>Karakeep is a elf-hostable bookmark-everything app. In version 0.30.0, when the Reddit metascraper plugin returns `readableContentHtml`, the HTML parsing subprocess uses it directly without running it through DOMPurify. Every other content source in the crawler goes through Readability + DOMPurify, but the Reddit path skips both. Since this content ends up in `dangerouslySetInnerHTML` in the reader view, any malicious HTML in the Reddit response gets executed in the user&#39;s browser. Version 0.31.0 contains a patch for this issue.</p> https://cve.radiocsirt.org/vuln/cve-2026-27627