<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: sidekiq</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-46951: Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive </title><link>https://patchthecve.com/cve/CVE-2023-46951.html</link><guid>https://patchthecve.com/cve/CVE-2023-46951.html</guid><pubDate>Wed, 17 Jun 2026 06:31:53 +0000</pubDate><description>MEDIUM 6.1: Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted payload to the uniquejobs function.</description></item><item><title>CVE-2023-46950: Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive </title><link>https://patchthecve.com/cve/CVE-2023-46950.html</link><guid>https://patchthecve.com/cve/CVE-2023-46950.html</guid><pubDate>Wed, 17 Jun 2026 06:31:52 +0000</pubDate><description>MEDIUM 6.1: Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted URL to the filter functions.</description></item><item><title>CVE-2023-26141: Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient che</title><link>https://patchthecve.com/cve/CVE-2023-26141.html</link><guid>https://patchthecve.com/cve/CVE-2023-26141.html</guid><pubDate>Wed, 17 Jun 2026 05:42:46 +0000</pubDate><description>HIGH 7.5: Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests.</description></item></channel></rss>