https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 02:19:57 +0000 https://cve.radiocsirt.org/vuln/cve-2026-33213 <p><strong>Affected:</strong> getredash redash</p> <p>Redash is a package for data visualization and sharing. From 5.0.2 to 26.3.0, the get_next_path() function in Redash&#39;s authentication module stripped the scheme and netloc from user-supplied next parameters but did not normalize multiple leading slashes, allowing a crafted login URL such as /login?next=////evil.com to redirect users to an external attacker-controlled site after authentication.</p> <p><strong>Affected:</strong> getredash redash</p> <p>Redash is a package for data visualization and sharing. From 5.0.2 to 26.3.0, the get_next_path() function in Redash&#39;s authentication module stripped the scheme and netloc from user-supplied next parameters but did not normalize multiple leading slashes, allowing a crafted login URL such as /login?next=////evil.com to redirect users to an external attacker-controlled site after authentication.</p> https://cve.radiocsirt.org/vuln/cve-2026-33213