PyPI/wagtail CVE-2021-29434: unknown, EPSS 0.63%

Wagtail is a Django content management system. In affected versions of Wagtail, when saving the contents of a rich text field in the admin interface, Wagtail does not apply server-side checks to ensur

Action: Upgrade wagtail to 2.11.6 or later.

pip install wagtail==2.11.7

pip install wagtail==2.11.6

pip install wagtail==2.12.4

Affected

introduced	fixed	last affected
0	2.11.6	-
2.12	2.12.4	-

Fixed versions

2.11.7

2.11.6

2.12.4

Sources

osv: PYSEC-2021-114
https://github.com/wagtail/wagtail/security/advisories/GHSA-wq5h-f9p5-q7fx
https://pypi.org/project/wagtail/

CVE-2021-29434 · published 2021-04-19T19:15:00Z · modified 2023-11-08T04:05:33.896694Z · JSON