TI-2024-31546 CVE-2024-47179
Improper input validation in DIYgod RSSHub
Priority HIGH 79
RSSHub is an RSS network.
DIYgod
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
DIYgod records in CISA KEVNo DIYgod vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2022-13154 CVE-2022-31110 · GHSA-jvxx-v45p-v5vf
Denial of Service (DoS) vulnerability in RSSHub
Priority HIGH 72
RSSHub is an open source, extensible RSS feed generator.
TI-2023-08742 CVE-2023-22493 · GHSA-64wp-jh9p-5cg2
RSSHub is vulnerable to SSRF (Server-Side Request Forgery)
Priority HIGH 71
RSSHub is an open source RSS feed generator.
TI-2021-04378 CVE-2021-21278 · GHSA-pgjj-866w-fc5c
Risk of code injection in RSSHub
Priority MEDIUM 45
RSSHub is an open source, easy to use, and extensible RSS feed generator.
TI-2024-18530 CVE-2024-27927 · GHSA-3p3p-cgj7-vgw3
RSSHub vulnerable to SSRF in /mastodon, /zjoi, and /m4
Priority LOW 37
RSSHub is an open source RSS feed generator.
TI-2024-18529 CVE-2024-27926 · GHSA-2wqw-hr4f-xrhh
RSSHub Cross-site Scripting vulnerability caused by internal media proxy
Priority LOW 28
RSSHub is an open source RSS feed generator.
TI-2023-11638 CVE-2023-26491 · GHSA-32gr-4cq6-5w5q
RSSHub is vulnerable to cross-site scripting (XSS) via unvalidated URL parameters
Priority LOW 28
RSSHub is an open source and extensible RSS feed generator.