PyPI/koji CVE-2024-9427: medium 5.4, EPSS 0.29%
Koji Cross-site Scripting
Action: Upgrade koji to 1.33.2 or later.
pip install koji==1.35.1pip install koji==1.34.3pip install koji==1.33.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.35.0 | 1.35.1 | - |
| 1.34.0 | 1.34.3 | - |
| 0 | 1.33.2 | - |
Fixed versions
| 1.35.1 | 1.34.3 | 1.33.2 |
Sources
- osv: GHSA-g2vg-8hfg-79vj
- https://nvd.nist.gov/vuln/detail/CVE-2024-9427
- https://access.redhat.com/security/cve/CVE-2024-9427
- https://bugzilla.redhat.com/show_bug.cgi?id=2316047
- https://docs.pagure.org/koji/CVEs/CVE-2024-9427
- https://pagure.io/koji
- https://pagure.io/koji/c/8c72d90d7bb991f8fb193851b80847ac9e9474a4?branch=master
CVE-2024-9427 · published · modified · JSON