PyPI/products-isurlinportal CVE-2021-32806: medium 6.5, EPSS 1.03%

URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal

Action: Upgrade products-isurlinportal to 1.2.0 or later.

pip install products-isurlinportal==1.2.0

Affected

Fixed versions

Sources

• osv: GHSA-q3m9-9fj2-mfwr
• https://github.com/plone/Products.isurlinportal/security/advisories/GHSA-q3m9-9fj2-mfwr
• https://nvd.nist.gov/vuln/detail/CVE-2021-32806
• https://github.com/plone/Products.isurlinportal/commit/d4fd34990d18adf05a10dc5e2bb4b066798280ba
• https://github.com/plone/Products.isurlinportal
• https://github.com/pypa/advisory-database/tree/main/vulns/products-isurlinportal/PYSEC-2021-323.yaml
• http://jvn.jp/en/jp/JVN50804280/index.html

CVE-2021-32806 · published 2021-08-05T17:02:12Z · modified 2026-07-08T06:28:00.985552837Z · JSON