Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the RSS/Atom feed handlers, which accept API-token Basic authentication but do not enforce token scope or public-only restrictions. An attacker can access private repository metadata, such as commit information,...

Cross Site Scripting (XSS)

Mozilla Thunderbird is vulnerable to cross site scripting XSS vulnerability. This affects an unknown functionality of the component RSS Feed Handler. Attackers can execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website...