PyPI/graphite-web CVE-2022-4729: medium 5.4, EPSS 0.76%
Graphite Web Cross-site Scripting vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.1.10 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-820
- https://nvd.nist.gov/vuln/detail/CVE-2022-4729
- https://github.com/graphite-project/graphite-web/issues/2745
- https://github.com/graphite-project/graphite-web/pull/2785
- https://github.com/graphite-project/graphite-web/commit/2f178f490e10efc03cd1d27c72f64ecab224eb23
- https://github.com/graphite-project/graphite-web
- https://vuldb.com/?id.216743
- https://pypi.org/project/graphite-web
- https://github.com/advisories/GHSA-q99p-78hp-xg5c
CVE-2022-4729 · published · modified · JSON