PyPI/xml2rfc: medium
SVG with embedded scripts can lead to cross-site scripting attacks in xml2rfc
Action: Upgrade xml2rfc to 3.12.4 or later.
pip install xml2rfc==3.12.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.12.4 | - |
Fixed versions
| 3.12.4 |
Sources
- osv: GHSA-cf4q-4cqr-7g7w
- https://github.com/ietf-tools/xml2rfc/security/advisories/GHSA-cf4q-4cqr-7g7w
- https://github.com/ietf-tools/xml2rfc
published · modified · JSON