Skip to content
OpenAdvisories

Package · npm

rsshub

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2023-22493 Public exploit

    RSSHub is vulnerable to SSRF (Server-Side Request Forgery)

    RSSHub is an open source RSS feed generator. RSSHub is vulnerable to Server-Side Request Forgery (SSRF) attacks. This vulnerability allows an attacker to send arbitrary HTTP requests from the server to other servers or resources on the network. An attacker ca…

    DIYgod RSSHub rsshub npm
  • High 8.6
    CVE-2021-21278

    Risk of code injection in RSSHub

    RSSHub is an open source, easy to use, and extensible RSS feed generator. In RSSHub before version 7f1c430 (non-semantic versioning) there is a risk of code injection. Some routes use `eval` or `Function constructor`, which may be injected by the target site …

    DIYgod RSSHub rsshub npm