https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-29T02:50:22.022116+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-90772 fkie_cve-2026-90772 2026-09-29T02:50:22.044353+00:00

Amundsen frontend through 4.3.0 renders table, dashboard, and feature descriptions with dangerouslySetInnerHTML without HTML sanitization in ResourceListItem components. Attackers can inject malicious markup like img elements with onerror handlers into descriptions via the metadata service or Elasticsearch, executing JavaScript in every user's browser that views search results.

 https://db.gcve.eu/vuln/ghsa-pxc2-2wvq-r8jw GHSA-pxc2-2wvq-r8jw 2026-09-29T02:50:22.044428+00:00

Amundsen frontend through 4.3.0 renders table, dashboard, and feature descriptions with dangerouslySetInnerHTML without HTML sanitization in ResourceListItem components. Attackers can inject malicious markup like img elements with onerror handlers into descriptions via the metadata service or Elasticsearch, executing JavaScript in every user's browser that views search results.