PyPI/agentscope CVE-2024-8556: medium 6.1, EPSS 0.43%
AgentScope stored cross-site scripting (XSS) vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.1.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-6mf6-7j75-2m6f
- https://nvd.nist.gov/vuln/detail/CVE-2024-8556
- https://github.com/modelscope/agentscope
- https://github.com/modelscope/agentscope/blob/21161fe9985ee2a2f617180b00a1424b81302d42/src/agentscope/studio/static/js/dashboard.js#L90
- https://huntr.com/bounties/8439f16b-5256-4466-bb7d-371572572a4b
CVE-2024-8556 · published · modified · JSON