Description
invenio-records before 1.2.2 allows XSS.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Invenio | invenio-records | < 1.2.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | invenio-records | < 1.0.2 | 1.0.2 | GHSA-vxh3-mvv7-265j |
| PyPI | invenio-records | >= 1.1.0, < 1.1.1 | 1.1.1 | GHSA-vxh3-mvv7-265j |
| PyPI | invenio-records | >= 1.2.0, < 1.2.2 | 1.2.2 | GHSA-vxh3-mvv7-265j |