Skip to content
OpenAdvisories

Vendor

mesop-dev

6 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.3

    Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint

    Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.4, the unauthenticated /__csp__ endpoint passes attacker-controlled document-uri, blocked-uri, and violated-directive values to the csp_report handler in mesop/serv…