Skip to content
OpenAdvisories

Package · PyPI

dosage

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.1
    GHSA-75mw-h36v-2jv7

    Dosage Vulnerable to Stored Cross-Site Scripting (XSS) in HTML/RSS Output Handlers

    ## Summary The HTML and RSS output handlers in `dosagelib/events.py` write user-controlled content (comic text and page URLs) directly into generated files without proper HTML escaping. When a user scrapes a malicious webcomic and opens the generated HTML/RSS…

    dosage PyPI
  • High 8.8
    CVE-2025-64184

    Dosage vulnerable to Directory Traversal through crafted HTTP responses

    Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic (page URL, image URL, page content, etc.). While the basename is properly …

    webcomics dosage dosage dosage Ubuntu PyPI