Skip to content
OpenAdvisories

Package · PyPI

pyspider

2 known vulnerabilities.

2 results · Feed

  • High 8.8

    pyspider Cross-Site Request Forgery (CSRF) via the Flask endpoints

    binux pyspider up to v0.3.10 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Flask endpoints.

  • Medium 6.1

    pyspider Cross-site Scripting vulnerability

    pyspider through 0.3.10 allows /update XSS. NOTE: This vulnerability only affects products that are no longer supported by the maintainer