https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T08:18:23.447186+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2023-48094 fkie_cve-2023-48094 2026-11-11T08:18:23.449314+00:00

A cross-site scripting (XSS) vulnerability in CesiumJS v1.111 allows attackers to execute arbitrary code in the context of the victim's browser via sending a crafted payload to /container_files/public_html/doc/index.html. NOTE: the vendor’s position is that Apps/Sandcastle/standalone.html is part of the CesiumGS/cesium GitHub repository, but is demo code that is not part of the CesiumJS JavaScript library product.

 https://db.gcve.eu/vuln/ghsa-4532-pmx7-9ww7 Withdrawn: GHSA-4532-pmx7-9ww7 — Cross-site Scripting in cesium 2026-11-11T08:18:23.449410+00:00

Withdrawn by the publisher.

Affected: npm: cesium

A cross-site scripting (XSS) vulnerability in CesiumJS v1.111 allows attackers to execute arbitrary code in the context of the victim's browser via sending a crafted payload to /container_files/public_html/doc/index.html. NOTE: the vendor’s position is that Apps/Sandcastle/standalone.html is part of the CesiumGS/cesium GitHub repository, but is demo code that is not part of the CesiumJS JavaScript library product.'

 https://db.gcve.eu/vuln/gsd-2023-48094 gsd-2023-48094 2026-11-11T08:18:23.449465+00:00 gsd-2023-48094