CVE-2023-40024
2 advisories.
PyPI/scancodeio CVE-2023-40024: medium 6.1
Scancode.io Reflected Cross-Site Scripting (XSS) in license endpoint
Action: Upgrade scancodeio to 32.5.2 or later.
pip install scancodeio==32.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 32.5.2 | - |
Fixed versions
| 32.5.2 |
Sources
- osv: GHSA-6xcx-gx7r-rccj
- https://github.com/nexB/scancode.io/security/advisories/GHSA-6xcx-gx7r-rccj
- https://nvd.nist.gov/vuln/detail/CVE-2023-40024
- https://github.com/nexB/scancode.io
- https://github.com/nexB/scancode.io/blob/dd7769fbc97c84545579cebf1dc4838214098a11/CHANGELOG.rst#v3252-2023-08-14
- https://github.com/nexB/scancode.io/releases/tag/v32.5.2
CVE-2023-40024 · published · modified · JSON
PyPI/scancodeio CVE-2023-40024: medium 6.1
Scancode.io Reflected Cross-Site Scripting (XSS) in license endpoint
Action: Upgrade scancodeio to 32.5.2 or later.
pip install scancodeio==32.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 32.5.2 | - |
Fixed versions
| 32.5.2 |
Sources
- osv: PYSEC-2026-1905
- https://github.com/nexB/scancode.io/security/advisories/GHSA-6xcx-gx7r-rccj
- https://nvd.nist.gov/vuln/detail/CVE-2023-40024
- https://github.com/nexB/scancode.io
- https://github.com/nexB/scancode.io/blob/dd7769fbc97c84545579cebf1dc4838214098a11/CHANGELOG.rst#v3252-2023-08-14
- https://github.com/nexB/scancode.io/releases/tag/v32.5.2
- https://pypi.org/project/scancodeio
- https://github.com/advisories/GHSA-6xcx-gx7r-rccj
CVE-2023-40024 · published · modified · JSON