PyPI/octoprint CVE-2021-32561: unknown, EPSS 1.15%

OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters.

Action: Upgrade octoprint to 1.6.0 or later.

pip install octoprint==1.6.0

Affected

Fixed versions

Sources

• osv: PYSEC-2021-30
• https://github.com/OctoPrint/OctoPrint/releases/tag/1.6.0
• https://www.brzozowski.io
• https://octoprint.org/blog/2021/04/27/new-release-1.6.0/
• https://github.com/advisories/GHSA-vcx4-fpmp-mvv6

CVE-2021-32561 · published 2021-05-11T14:15:00Z · modified 2026-06-10T17:02:27.253406900Z · JSON