Skip to content

Ech0's RSS feed renders unescaped tag names and raw-HTML markdown, stored XSS against subscribers

Moderate severity GitHub Reviewed Published May 3, 2026 in lin-snow/Ech0 • Updated May 7, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts