Skip to content
OpenAdvisories

Package · PyPI

dosage

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    Dosage Vulnerable to Stored Cross-Site Scripting (XSS) in HTML/RSS Output Handlers

    ## Summary The HTML and RSS output handlers in `dosagelib/events.py` write user-controlled content (comic text and page URLs) directly into generated files without proper HTML escaping. When a user scrapes a malicious webcomic and opens the generated HTML/RSS…