CVE-2019-1020003

2 advisories.

PyPI/invenio-records CVE-2019-1020003: medium 5.4, EPSS 0.66%

Cross-site scripting invenio-records

Action: Upgrade invenio-records to 1.0.2 or later.

pip install invenio-records==1.0.2

pip install invenio-records==1.1.1

pip install invenio-records==1.2.2

Affected

introduced	fixed	last affected
0	1.0.2	-
1.1.0	1.1.1	-
1.2.0	1.2.2	-

Fixed versions

1.0.2

1.1.1

1.2.2

Sources

CVE-2019-1020003 · published 2019-07-16T00:52:15Z · modified 2026-09-10T03:48:24.344770070Z · JSON

PyPI/invenio-records CVE-2019-1020003: unknown, EPSS 0.66%

invenio-records before 1.2.2 allows XSS.

Action: Upgrade invenio-records to 1.0.2 or later.

pip install invenio-records==1.0.2

Affected

introduced	fixed	last affected
0	1.0.2	-

Fixed versions

1.0.2

Sources

CVE-2019-1020003 · published 2019-07-29T15:15:00Z · modified 2023-11-08T04:00:42.679955Z · JSON