Skip to content
OpenAdvisories

Package · Ubuntu

roundup

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Medium 6.4
    CVE-2025-53865

    Roundup is vulnerable to XSS through interactions between URLs and issue tracker templates

    In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates (devel and responsive).

    roundup-tracker Roundup roundup roundup Ubuntu PyPI
  • Medium 5.4
    CVE-2024-39125

    Roundup Cross-site Scripting Vulnerability

    Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header.

    roundup roundup Ubuntu PyPI
  • Medium 5.4
    CVE-2024-39126

    Roundup Cross-site Scripting Vulnerability

    Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents.

    roundup roundup Ubuntu PyPI
  • Medium 6.1
    CVE-2024-39124

    Roundup Cross-site Scripting Vulnerability

    In Roundup before 2.4.0, classhelpers (_generic.help.html) allow XSS.

    roundup roundup Ubuntu PyPI
  • Medium 6.1
    CVE-2019-10904

    Moderate severity vulnerability that affects roundup

    Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgi_handler.py mishandle 404 errors.

    roundup roundup Ubuntu PyPI
  • Medium 4.3
    CVE-2014-6276

    Roundup sensitive data disclosure vulnerability

    schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to obtain sensitive user information by viewing user details.

    roundup roundup Ubuntu PyPI