PyPI/roundup CVE-2012-6133: medium 6.1, EPSS 1.56%

Multiple cross-site scripting (XSS) vulnerabilities in Roundup

Action: Upgrade roundup to 1.4.20 or later.

pip install roundup==1.4.20

Affected

Fixed versions

Sources

• osv: GHSA-5jq3-8437-x35p
• https://nvd.nist.gov/vuln/detail/CVE-2012-6133
• https://bugzilla.redhat.com/show_bug.cgi?id=722672
• https://github.com/advisories/GHSA-5jq3-8437-x35p
• https://github.com/pypa/advisory-database/tree/main/vulns/roundup/PYSEC-2020-212.yaml
• https://pypi.python.org/pypi/roundup/1.4.20
• http://hg.code.sf.net/p/roundup/code
• http://issues.roundup-tracker.org/issue2550724
• http://www.openwall.com/lists/oss-security/2012/11/10/2
• http://www.openwall.com/lists/oss-security/2013/02/13/8

CVE-2012-6133 · published 2022-04-23T00:40:39Z · modified 2024-10-21T21:24:24.880368Z · JSON