CVE-2026-59728 @astrojs/rss: XML Injection via Unescaped RSS Feed Fields

Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the source.title and enclosure.type item fields in packages/astro-rss/src/index.ts are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. Bot...

EUVD-2026-49584

Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the source.title and enclosure.type item fields in packages/astro-rss/src/index.ts are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. Bot...

GHSA-HRXH-6V49-42GF

creationtimestamp| type| source ---|---|--- 2026-07-27 19:48:38+00:00| seen| https://gist.github.com/allanrogerr/6d10196ab8eb0d80a2cfca871b45d9a8 2026-08-03 12:03:59+00:00| seen| https://bsky.app/profile/mfahlandt.bsky.social/post/3ms6hejb7hx2j...

MINI-3GXH-WCFM-75F7

Bulletin has no description...

CVE-2026-66028

creationtimestamp| type| source ---|---|--- 2026-07-27 19:22:02+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrnmljfshn2c...

GHSA-X5VX-C2C8-M3W9

creationtimestamp| type| source ---|---|--- 2026-07-27 19:20:30+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrnmis3k5v2n...

GHSA-35Q8-9MJ6-WJMF

creationtimestamp| type| source ---|---|--- 2026-07-27 19:18:57+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrnmfzh6ff2o...

GHSA-PM35-FQVH-CQ5G

creationtimestamp| type| source ---|---|--- 2026-07-27 19:17:24+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrnmdahelz2n...

CVE-2026-14289

creationtimestamp| type| source ---|---|--- 2026-07-27 19:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnlhthk4s22...

CVE-2025-50455

creationtimestamp| type| source ---|---|--- 2026-07-27 19:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnledemyl2a...

CVE-2026-51303

creationtimestamp| type| source ---|---|--- 2026-07-27 19:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnleby5dt2v...

CVE-2026-66730

creationtimestamp| type| source ---|---|--- 2026-07-27 19:00:03+00:00| seen| https://t.me/GithubRedTeam/95401 2026-07-28 00:00:24+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/95401...

CVE-2026-66731

creationtimestamp| type| source ---|---|--- 2026-07-27 19:00:03+00:00| seen| https://t.me/GithubRedTeam/95400 2026-07-28 00:00:24+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/95400...

CVE-2026-33327

creationtimestamp| type| source ---|---|--- 2026-07-27 18:53:11+00:00| seen| https://gist.github.com/saxonthune/1f01fdc8d7c86033e2721f38b4a52427...

CVE-2026-45623

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap parses the / sourceMappingURL=PATH / comment from any CSS string passed to process and dereferences PATH against the...

DEBIAN-CVE-2026-45623

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap parses the / sourceMappingURL=PATH / comment from any CSS string passed to process and dereferences PATH against the...

CVE-2026-63077

creationtimestamp| type| source ---|---|--- 2026-07-27 18:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnidphmxq2j 2026-07-28 09:00:06+00:00| seen| https://t.me/thehackernews/9631 2026-07-28 10:00:53+00:00| seen|...

CVE-2026-17191

creationtimestamp| type| source ---|---|--- 2026-07-27 18:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnia6h6xo2z 2026-07-27 19:49:46+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrno54pgmv2j...

CVE-2026-66396

creationtimestamp| type| source ---|---|--- 2026-07-27 18:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnia5azfv2a 2026-07-30 04:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtnltbwyb2j...

CVE-2026-61487

creationtimestamp| type| source ---|---|--- 2026-07-27 18:03:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrni7yb6hz22 2026-07-28 14:58:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpocvshb32e...