Skip to content
OpenAdvisories

Vendor

bugsink

10 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.3

    Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering

    Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.13, an unauthenticated attacker who can submit events to a Bugsink project can store arbitrary JavaScript in an event. The payload executes only if a user explicitly views the affected Sta…