Skip to content
OpenAdvisories

Vendor

DIYgod

7 known vulnerabilities.

Products

RSSHub 7
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2024-47179 Public exploit

    RSSHub's `docker-test-cont.yml` workflow is vulnerable to Artifact Poisoning which may lead to a full repository takeover.

    RSSHub is an RSS network. Prior to commit 64e00e7, RSSHub's `docker-test-cont.yml` workflow is vulnerable to Artifact Poisoning, which could have lead to a full repository takeover. Downstream users of RSSHub are not vulnerable to this issue, and commit 64e00…

    DIYgod RSSHub
  • High 8.8
    CVE-2023-22493 Public exploit

    RSSHub is vulnerable to SSRF (Server-Side Request Forgery)

    RSSHub is an open source RSS feed generator. RSSHub is vulnerable to Server-Side Request Forgery (SSRF) attacks. This vulnerability allows an attacker to send arbitrary HTTP requests from the server to other servers or resources on the network. An attacker ca…

    DIYgod RSSHub rsshub npm
  • High 8.6
    CVE-2021-21278

    Risk of code injection in RSSHub

    RSSHub is an open source, easy to use, and extensible RSS feed generator. In RSSHub before version 7f1c430 (non-semantic versioning) there is a risk of code injection. Some routes use `eval` or `Function constructor`, which may be injected by the target site …

    DIYgod RSSHub rsshub npm