PyPI/readthedocs-sphinx-search: medium 6.3
readthedocs-sphinx-search vulnerable to cross-site scripting when including search results from malicious projects
Action: Upgrade readthedocs-sphinx-search to 0.3.2 or later.
pip install readthedocs-sphinx-search==0.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.2 | - |
Fixed versions
| 0.3.2 |
Sources
- osv: GHSA-xgfm-fjx6-62mj
- https://github.com/readthedocs/readthedocs-sphinx-search/security/advisories/GHSA-xgfm-fjx6-62mj
- https://github.com/readthedocs/readthedocs-sphinx-search/commit/8c6f6d01e88e72ef32ed0c220b6c19d1e1121c73
- https://github.com/readthedocs/readthedocs-sphinx-search
published · modified · JSON