CVE-2026-59728

Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the source.title and enclosure.type item fields in packages/astro-rss/src/index.ts are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. Bot...

CVE-2026-59728 @astrojs/rss: XML Injection via Unescaped RSS Feed Fields

Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the source.title and enclosure.type item fields in packages/astro-rss/src/index.ts are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. Bot...

CVE-2026-59728

CVE-2026-59728 (astrojs/rss) affects Astro versions 1.0.0–4.0.18 where source.title and enclosure.type are interpolated into XML without escaping in packages/astro-rss/src/index.ts, then parsed by fast-xml-parser. This allows an attacker-controlled value to inject arbitrary XML into the generated...

EUVD-2026-49584

Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the source.title and enclosure.type item fields in packages/astro-rss/src/index.ts are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. Bot...

CVE-2026-59728 @astrojs/rss: XML Injection via Unescaped RSS Feed Fields

Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the source.title and enclosure.type item fields in packages/astro-rss/src/index.ts are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. Bot...

CVE-2026-66394

SiYuan before v3.7.3 contains stored and reflected cross-site scripting vulnerabilities in SVG sanitization that allows authenticated attackers to execute scripts by bypassing the HTML parser-based cleaner. Attackers can hide script tags within desc, style, or noscript elements which the HTML...

CVE-2026-57917

proCertum SmartSign parses external XML entities from arbitrary crafted signature files, enabling SSRF and potentially allowing the reading of local files, depending on the parser's configuration. The XML External Entity XXE vulnerability is triggered simply by previewing a file in the file...

CVE-2026-57917

CVE-2026-57917 affects proCertum SmartSign. The issue is an XML External Entity (XXE) vulnerability where external entities are parsed from crafted signature files, enabling SSRF and potentially local file reads depending on parser configuration. The vulnerability is triggered by previewing a fil...

EUVD-2026-49143

proCertum SmartSign parses external XML entities from arbitrary crafted signature files, enabling SSRF and potentially allowing the reading of local files, depending on the parser's configuration. The XML External Entity XXE vulnerability is triggered simply by previewing a file in the file...

CVE-2026-57917

proCertum SmartSign parses external XML entities from arbitrary crafted signature files, enabling SSRF and potentially allowing the reading of local files, depending on the parser's configuration. The XML External Entity XXE vulnerability is triggered simply by previewing a file in the file...

EUVD-2026-49062

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page component...

RHEL 7 : libreoffice (RHSA-2026:46386)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:46386 advisory. LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processo...

Code Injection

Kiota is vulnerable to Code Injection. The vulnerability is due to improper sanitization of OpenAPI documentation fields before generating C XML documentation comments, which allows an attacker to inject arbitrary C code into generated client source files...

Linux Distros Unpatched Vulnerability : CVE-2026-56817

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through...

Linux Distros Unpatched Vulnerability : CVE-2026-15037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper output neutralization XML injection in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted...

Linux Distros Unpatched Vulnerability : CVE-2026-63317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected: - before 2.5.10 - before 3.0.0-M5...

GHSA-V74W-7MR3-4QG3 Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion

Summary An attacker can cause Denial of Service by sending a specially crafted malicious XML payload e.g., repeated . Because the parser state is not saved between decode invocations, an attacker can trickle-feed a payload of / characters. This forces the decoder to repeatedly rescan the entire...

Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion

Summary An attacker can cause Denial of Service by sending a specially crafted malicious XML payload e.g., repeated . Because the parser state is not saved between decode invocations, an attacker can trickle-feed a payload of / characters. This forces the decoder to repeatedly rescan the entire...

SUSE CVE-2026-63317

Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected: - before 2.5.10 - before 3.0.0-M5 Description: Three code paths in Apache OpenNLP load a class by its fully-qualified name via Class.forName and invoke its no-arg constructor...

GHSA-3HRF-2GC2-MX32 Microsoft Kiota: XML Doc-Comment Newline Breakout Code Injection

Summary Kiota versions prior to 1.32.3 and 1.29.1 are affected by a code-generation injection vulnerability in the C XML documentation-comment sink the description, externalDocs label, and externalDocs link fields emitted as /// … comments. When text from an OpenAPI description is written into...