| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2024-47179 | RSSHub's `docker-test-cont.yml` workflow is vulnerable to Artifact Poisoning which may lead to a full repository takeover. | DIYgod | RSSHub | High | 8.8 | 2024-09-26 19:10:28 | Deep Dive |
| CVE-2024-27927 | RSSHub vulnerable to SSRF in /mastodon, /zjoi, and /m4 | DIYgod | RSSHub | Medium | 6.5 | 2024-03-06 20:42:52 | Deep Dive |
| CVE-2024-27926 | RSSHub Cross-site Scripting vulnerability caused by internal media proxy | DIYgod | RSSHub | Medium | 6.1 | 2024-03-06 20:36:04 | Deep Dive |
| CVE-2023-26491 | RSSHub is vulnerable to cross-site scripting (XSS) via unvalidated URL parameters | DIYgod | RSSHub | Medium | 5.4 | 2023-03-03 22:41:37 | Deep Dive |
| CVE-2023-22493 | RSSHub is vulnerable to SSRF (Server-Side Request Forgery) | DIYgod | RSSHub | High | 8.8 | 2023-01-13 14:28:49 | Deep Dive |
| CVE-2022-31110 | Denial of Service (DoS) vulnerability in RSSHub | DIYgod | RSSHub | Medium | 5.3 | 2022-06-29 18:00:18 | Deep Dive |
| CVE-2021-21278 | Risk of code injection in RSSHub | DIYgod | RSSHub | High | 8.6 | 2021-01-26 20:25:15 | Deep Dive |