PyPI/invenio-communities: medium 6.3

Invenio-Communities has a Cross-Site Scripting (XSS) vulnerability in React components

Action: Upgrade invenio-communities to 2.8.11 or later.

pip install invenio-communities==7.8.0

pip install invenio-communities==4.2.2

pip install invenio-communities==2.8.11

Affected

Fixed versions

Sources

• osv: GHSA-hjx6-f647-mvf9
• https://github.com/inveniosoftware/invenio-communities/security/advisories/GHSA-hjx6-f647-mvf9
• https://github.com/inveniosoftware/invenio-communities/commit/4424dd5112818992b82ae42d4c4f89089502b35f
• https://github.com/inveniosoftware/invenio-communities/commit/6a47db9404c51134634b3905f62f612b4a976698
• https://github.com/inveniosoftware/invenio-communities/commit/817b8208f5ce262f45eab32832d90b80dc7d3fce
• https://github.com/inveniosoftware/invenio-communities/commit/b89442c9d57421a88dd0aa89a404ba89d1a22cac
• https://github.com/inveniosoftware/invenio-communities

published 2024-06-12T19:43:04Z · modified 2024-11-29T05:33:56.274697Z · JSON