PyPI/qutebrowser CVE-2018-1000559: medium 6.1, EPSS 1.50%

Qutebrowser XSS Vulnerability

Action: Upgrade qutebrowser to 1.3.3 or later.

pip install qutebrowser==1.3.3

Affected

Fixed versions

Sources

• osv: GHSA-m4fw-77v7-924m
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000559
• https://github.com/qutebrowser/qutebrowser/issues/4011
• https://github.com/qutebrowser/qutebrowser/commit/4c9360237f186681b1e3f2a0f30c45161cf405c7
• https://github.com/qutebrowser/qutebrowser/commit/5a7869f2feaa346853d2a85413d6527c87ef0d9f
• https://github.com/advisories/GHSA-m4fw-77v7-924m
• https://github.com/pypa/advisory-database/tree/main/vulns/qutebrowser/PYSEC-2018-26.yaml
• https://github.com/qutebrowser/qutebrowser

CVE-2018-1000559 · published 2018-09-13T15:47:57Z · modified 2024-10-25T21:45:58.166660Z · JSON