Description
invenio-communities before 1.0.0a20 allows XSS.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Invenio | invenio-communities | < 1.0.0a20 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | invenio-communities | < 1.0.0a20 | 1.0.0a20 | GHSA-mfv8-q39f-mgfg |