https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T04:22:00.024206+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2025-70297 fkie_cve-2025-70297 2026-11-06T04:22:00.041554+00:00

A stored cross-site scripting (XSS) vulnerability in the recipe asset upload and media serving component in Mealie 3.3.1 allows remote authenticated users to inject arbitrary web script or HTML via an uploaded SVG file that is served as image/svg+xml and rendered by a victim s browser.

 https://db.gcve.eu/vuln/ghsa-96g7-r737-95hv GHSA-96g7-r737-95hv 2026-11-06T04:22:00.041641+00:00

A stored cross-site scripting (XSS) vulnerability in the recipe asset upload and media serving component in Mealie 3.3.1 allows remote authenticated users to inject arbitrary web script or HTML via an uploaded SVG file that is served as image/svg+xml and rendered by a victim s browser.