tocsin

Debian/beets: unknown

Beets is the media library management system. Prior to version 2.10.0, the bundled web UI uses Underscore template interpolation mode <%= ... %> for untrusted metadata fields. In this runtime, <%= ...

Action: Upgrade beets to 1.6.0-4+deb12u1 or later.

Affected

introducedfixedlast affected
01.6.0-4+deb12u1-

Fixed versions

1.6.0-4+deb12u1

Sources

published · modified · JSON