https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 06:20:16 +0000 https://cve.radiocsirt.org/vuln/cve-2026-65986 <p><strong>Affected:</strong> cvat-ai cvat</p> <p>CVAT is an open source interactive video and image annotation tool for computer vision. Versions 2.5.0 through 2.66.0 contain a XSS vulnerability that can be accessed through annotation guide assets. When CVAT serves the files attached to an annotation guide, it labels them with a media type ( Content-Type ) that the attacker can influence, so instead of treating an uploaded file as plain data, the victim&#39;s browser can be told to treat it as an HTML page and run any JavaScript inside it. This issue has been fixed in version 2.67.0.</p> <p><strong>Affected:</strong> cvat-ai cvat</p> <p>CVAT is an open source interactive video and image annotation tool for computer vision. Versions 2.5.0 through 2.66.0 contain a XSS vulnerability that can be accessed through annotation guide assets. When CVAT serves the files attached to an annotation guide, it labels them with a media type ( Content-Type ) that the attacker can influence, so instead of treating an uploaded file as plain data, the victim&#39;s browser can be told to treat it as an HTML page and run any JavaScript inside it. This issue has been fixed in version 2.67.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-65986