PyPI/collective-task CVE-2022-4527: medium 6.1, EPSS 0.59%

collective.task Cross-site Scripting vulnerability

Action: Upgrade collective-task to 3.0.9 or later.

pip install collective-task==3.0.9

Affected

Fixed versions

Sources

• osv: GHSA-4r9h-x77w-mffv
• https://nvd.nist.gov/vuln/detail/CVE-2022-4527
• https://github.com/collective/collective.task/commit/1aac7f83fa2c2b41d59ba02748912953461f3fac
• https://github.com/collective/collective.task
• https://github.com/collective/collective.task/releases/tag/3.0.10
• https://github.com/collective/collective.task/releases/tag/3.0.9
• https://github.com/pypa/advisory-database/tree/main/vulns/collective-task/PYSEC-2022-42990.yaml
• https://vuldb.com/?id.215907

CVE-2022-4527 · published 2022-12-15T21:30:26Z · modified 2024-09-13T20:22:54.883764Z · JSON