PyPI/invenio-communities CVE-2019-1020005: unknown, EPSS 0.68%
invenio-communities before 1.0.0a20 allows XSS.
Action: Upgrade invenio-communities to 1.0.0a20 or later.
pip install invenio-communities==1.0.0a20Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0a20 | - |
Fixed versions
| 1.0.0a20 |
Sources
- osv: PYSEC-2019-25
- https://github.com/inveniosoftware/invenio-communities/security/advisories/GHSA-mfv8-q39f-mgfg
CVE-2019-1020005 · published · modified · JSON