https://db.gcve.eu/rss/recent/all/10Most recent entries from all2026-11-15T04:20:55.396400+00:00Vulnerability-Lookupinfo@gcve.eupython-feedgenContains only the most 10 recent entries.https://db.gcve.eu/vuln/ghsa-ffwr-vmf2-gpp2GHSA-ffwr-vmf2-gpp22026-11-15T04:20:55.404303+00:00
Stored XSS via avatar upload chained with an authentication bypass in /Attachments leads to ATO
in Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with elevated privileges