DIYgod

Products

ProductCVEsExploitedLatest
RSSHub7–Sep 26, 2024

Exploited and recent CVEs

  • CVE-2024-47179 High 8.8 RSSHub's `docker-test-cont.yml` workflow is vulnerable to Artifact Poisoning which may lead to a full repository takeover. 0.7%
  • CVE-2024-27927 Medium 6.5 RSSHub vulnerable to SSRF in /mastodon, /zjoi, and /m4 1.0%
  • CVE-2024-27926 Medium 6.1 RSSHub Cross-site Scripting vulnerability caused by internal media proxy 0.5%
  • CVE-2023-26491 Medium 5.4 RSSHub is vulnerable to cross-site scripting (XSS) via unvalidated URL parameters 0.4%
  • CVE-2023-22493 High 8.8 RSSHub is vulnerable to SSRF (Server-Side Request Forgery) 0.8%
  • CVE-2022-31110 Medium 5.3 Denial of Service (DoS) vulnerability in RSSHub 1.6%
  • CVE-2021-21278 High 8.6 Risk of code injection in RSSHub 1.6%