PyPI/docassemble-webapp CVE-2024-27290: medium 6.1, EPSS 0.43%
Docassemble HTML and javascript injection
Action: Upgrade docassemble-webapp to 1.4.97 or later.
pip install docassemble-webapp==1.4.97Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.97 | - |
Fixed versions
| 1.4.97 |
Sources
- osv: GHSA-pcfx-g2j2-f6f6
- https://github.com/jhpyle/docassemble/security/advisories/GHSA-pcfx-g2j2-f6f6
- https://nvd.nist.gov/vuln/detail/CVE-2024-27290
- https://github.com/jhpyle/docassemble/commit/4801ac7ff7c90df00ac09523077930cdb6dea2aa
- https://github.com/jhpyle/docassemble
CVE-2024-27290 · published · modified · JSON