crates.io/hurl: medium
Regex literal in Hurl files are not escaped when exported to HTML, allowing injections
Action: Upgrade hurl to 7.0.0 or later.
cargo update -p hurl --precise 7.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.0 | - |
Fixed versions
| 7.0.0 |
Sources
- osv: GHSA-v33j-v3x4-42qg
- https://github.com/Orange-OpenSource/hurl/security/advisories/GHSA-v33j-v3x4-42qg
- https://github.com/Orange-OpenSource/hurl/commit/248ac41cfa1797c52241c6ef756490d90027cdf2
- https://github.com/Orange-OpenSource/hurl/commit/7dcdbd1796785392b1e829d1f07c6687b9a8f27d
- https://github.com/Orange-OpenSource/hurl
published · modified · JSON