122516 matches found
@astrojs/rss: XML Injection via Unescaped RSS Feed Fields
Summary In @astrojs/rss, the source.title and enclosure.type item fields are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. An attacker who controls these field values can inject arbitrary XML elements into the generated RSS...
GHSA-8J5Q-MFJ2-5Q9Q @astrojs/rss: XML Injection via Unescaped RSS Feed Fields
Summary In @astrojs/rss, the source.title and enclosure.type item fields are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. An attacker who controls these field values can inject arbitrary XML elements into the generated RSS...
XML Injection
Overview @astrojs/rss is an Add RSS feeds to your Astro projects Affected versions of this package are vulnerable to XML Injection via the source.title and enclosure.type fields, which are interpolated directly into XML templates without proper escaping. An attacker can inject arbitrary XML...
CVE-2026-47255
creationtimestamp| type| source ---|---|--- 2026-07-20 23:01:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4flmkaao2l 2026-07-20 23:55:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4ilpwk632s...
CVE-2026-55544
creationtimestamp| type| source ---|---|--- 2026-07-20 23:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4fkeqfif2u...
CVE-2026-64650
creationtimestamp| type| source ---|---|--- 2026-07-20 22:55:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4fbegvcg23...
CVE-2026-64651
creationtimestamp| type| source ---|---|--- 2026-07-20 22:40:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4eghjh6n2i...
minder v0.2.1
| | | | | Installation | Documentation | Releases What is Minder? Minder is an open source platform that helps development teams and open source communities build more secure software, and prove to others that what they’ve built is secure. Minder helps project owners proactively manage their...
CVE-2026-57121
creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:39+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rh39-9c67-59mh 2026-10-23 12:36:55+00:00| seen| https://infosec.exchange/users/cve/statuses/117490254789112837...
CVE-2026-57122
creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:33+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x92v-rpx6-p6cw...
CVE-2026-57135
creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:08+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gqmf-56h7-rrpf...
CVE-2026-44509
creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4e5isavb2q...
CVE-2026-57145
creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:46+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-29w3-p9w9-wc47 2026-07-23 17:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcvlzsfq2u 2026-09-14...
GHSA-G446-98W2-8P5W
creationtimestamp| type| source ---|---|--- 2026-07-20 22:31:01+00:00| seen| https://gist.github.com/alon710/afd4e223ed1d8cf62007fc8baac9d771...
CVE-2026-44585
creationtimestamp| type| source ---|---|--- 2026-07-20 22:30:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4duk7rjn2g...
CVE-2026-55219
creationtimestamp| type| source ---|---|--- 2026-07-20 22:22:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4dg5hrhk2b...
CVE-2026-51385
An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code via the validateurl, safefetch, buildopener, fetchhtml and downloadbinary functions...
CVE-2026-53594
creationtimestamp| type| source ---|---|--- 2026-07-20 22:06:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cjglmhe2s...