https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-29T19:56:15.418121+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-90771 fkie_cve-2026-90771 2026-09-29T19:56:15.423902+00:00

joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages compilation function that accepts __proto__ as an error code. Attackers can supply __proto__ keys in custom messages to replace the returned object's prototype, breaking downstream code relying on Object.prototype methods.

 https://db.gcve.eu/vuln/ghsa-wr44-6hxh-3jwq GHSA-wr44-6hxh-3jwq 2026-09-29T19:56:15.424099+00:00

joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages compilation function that accepts __proto__ as an error code. Attackers can supply __proto__ keys in custom messages to replace the returned object's prototype, breaking downstream code relying on Object.prototype methods.

 https://db.gcve.eu/vuln/rhsa-2026:67573 RHSA-2026:67573 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-09-29T19:56:15.424145+00:00

grafana: Grafana: Arbitrary code execution and information disclosure via Cross-Site Scripting in geomap panel grafana: tempo: loki: Tempo and Loki Datasource Plugins: Information disclosure and unauthorized actions via path traversal dompurify: DOMPurify: Cross-Site Scripting via IN_PLACE sanitization joi: joi: Prototype Pollution via custom messages