Skip to content
OpenAdvisories

Package · Debian

mako

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    Mako contains Cross-site Scripting vulnerability

    Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting (XSS) protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLo…