Skip to content
OpenAdvisories

Vendor

nexB

2 known vulnerabilities.

Products

scancode.io 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-40024

    Reflected Cross-Site Scripting (XSS) in scancode.io license endpoint

    ScanCode.io is a server to script and automate software composition analysis pipelines. In the `/license/` endpoint, the detailed view key is not properly validated and sanitized, which can result in a potential cross-site scripting (XSS) vulnerability when a…

    nexB scancode.io scancodeio PyPI
  • Medium 6.8
    CVE-2023-39523

    ScanCode.io command injection in docker image fetch process

    ScanCode.io is a server to script and automate software composition analysis with ScanPipe pipelines. Prior to version 32.5.1, the software has a possible command injection vulnerability in the docker fetch process as it allows to append malicious commands in…

    nexB scancode.io scancodeio PyPI