EUVD-2023-2960

Malicious code in bioql PyPI...

EUVD-2025-15590

Malicious code in bioql PyPI...

EUVD-2024-3177

Malicious code in bioql PyPI...

EUVD-2025-0095

Malicious code in bioql PyPI...

EUVD-2022-1206

Malicious code in bioql PyPI...

EUVD-2025-0097

Malicious code in bioql PyPI...

EUVD-2023-2539

Malicious code in bioql PyPI...

EUVD-2024-3316

Malicious code in bioql PyPI...

EUVD-2024-1233

Malicious code in bioql PyPI...

EUVD-2024-3206

Malicious code in bioql PyPI...

EUVD-2024-3289

Malicious code in bioql PyPI...

EUVD-2022-3897

Malicious code in bioql PyPI...

EUVD-2022-2372

Malicious code in bioql PyPI...

EUVD-2023-2435

Malicious code in bioql PyPI...

Cross-site Scripting (XSS)

librenms/librenms is vulnerable to stored cross-site scripting XSS. The vulnerability is due to malicious JavaScript being allowed in the Alert Template creation feature, which executes when the template is rendered...

CVE-2025-55296

librenms is a community-based GPL-licensed network monitoring system. A stored Cross-Site Scripting XSS vulnerability exists in LibreNMS = 25.6.0 in the Alert Template creation feature. This allows a user with the admin role to inject malicious JavaScript, which will be executed when the template...

GHSA-VXQ6-8CWM-WJ99 LibreNMS allows stored XSS in Alert Template name field

Summary A stored Cross-Site Scripting XSS vulnerability exists in LibreNMS alertdocument.cookie/script and filling the other fields with arbitrary content e.g., test, once the template is saved, the script is executed. This confirms that user input is stored and later rendered without proper outp...

LibreNMS allows stored XSS in Alert Template name field

Summary A stored Cross-Site Scripting XSS vulnerability exists in LibreNMS alertdocument.cookie/script and filling the other fields with arbitrary content e.g., test, once the template is saved, the script is executed. This confirms that user input is stored and later rendered without proper outp...

CVE-2025-55296

librenms is a community-based GPL-licensed network monitoring system. A stored Cross-Site Scripting XSS vulnerability exists in LibreNMS = 25.6.0 in the Alert Template creation feature. This allows a user with the admin role to inject malicious JavaScript, which will be executed when the template...

Cross-site Scripting (XSS)

Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Alert Template name field. An attacker can execute arbitrary JavaScript in the conte...