{"action":"Upgrade wagtail to 2.11.6 or later.","affected":[{"fixed":"2.11.6","introduced":"0"},{"fixed":"2.12.4","introduced":"2.12"}],"component":"wagtail","cve_ids":["CVE-2021-29434"],"ecosystem":"PyPI","epss":0.00626,"exploited":false,"fixed_versions":["2.11.7","2.11.6","2.12.4"],"ghsa_id":"GHSA-wq5h-f9p5-q7fx","id":"tcs_01M5KGB3PKD3W266JXEVABJ1H1","modified_at":"2023-11-08T04:05:33.896694Z","published_at":"2021-04-19T19:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-114","https://github.com/wagtail/wagtail/security/advisories/GHSA-wq5h-f9p5-q7fx","https://pypi.org/project/wagtail/"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-114","url":"https://osv.dev/vulnerability/PYSEC-2021-114"}],"summary":"Wagtail is a Django content management system. In affected versions of Wagtail, when saving the contents of a rich text field in the admin interface, Wagtail does not apply server-side checks to ensur"}