PyPI/plone-restapi: low 3.7

plone.restapi vulnerable to Stored Cross Site Scripting with SVG image in user portrait

Action: Upgrade plone-restapi to 8.43.3 or later.

pip install plone-restapi==8.43.3

Affected

Fixed versions

Sources

• osv: GHSA-hc5c-r8m5-2gfh
• https://github.com/plone/plone.restapi/security/advisories/GHSA-hc5c-r8m5-2gfh
• https://github.com/zopefoundation/Zope/security/advisories/GHSA-wm8q-9975-xh5v
• https://github.com/plone/plone.restapi/commit/5f44c23ac69db7d6d933d77f177e07603cf05f8b
• https://github.com/plone/plone.restapi

published 2023-09-21T17:16:44Z · modified 2024-12-04T05:39:14.551091Z · JSON