Skip to content
OpenAdvisories
Medium DLA-1750-1 1 CVE

roundup - security update

Published Apr 7, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 roundup 1.4.20-1.1+deb8u2

Vulnerabilities 1

  • Medium 6.1
    CVE-2019-10904

    Moderate severity vulnerability that affects roundup

    Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgi_handler.py mishandle 404 errors.

    roundup roundup Ubuntu PyPI