PyPI/copyparty: medium 6.3

copyparty vulnerable to reflected cross-site scripting via hc parameter

Action: Upgrade copyparty to 1.8.6 or later.

pip install copyparty==1.8.6

Affected

Fixed versions

Sources

• osv: GHSA-cw7j-v52w-fp5r
• https://github.com/9001/copyparty/security/advisories/GHSA-cw7j-v52w-fp5r
• https://github.com/9001/copyparty/commit/0778da6c4d04de870c61f970763a7b619094093c
• https://github.com/9001/copyparty
• https://github.com/9001/copyparty/releases/tag/v1.8.6

published 2023-07-21T20:20:56Z · modified 2025-02-14T05:29:37.302731Z · JSON