Debian/tt-rss: medium 6.1

An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. The cached_url feature mishandles JavaScript inside an SVG document.

Action: Upgrade tt-rss to 21~git20210204.b4cbc79+dfsg-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2020-25789
• https://security-tracker.debian.org/tracker/CVE-2020-25789

published 2020-09-19T21:15:12.063Z · modified 2026-09-11T11:02:30.126249009Z · JSON