Skip to content
OpenAdvisories
Medium · 4.8 CVE-2020-25449 EUVD-2020-0059GHSA-8q2h-4mq6-396jPYSEC-2020-226

Cabot Cross Site Scripting (XSS) vulnerability via Address column

Published Dec 4, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Package: cabot Ecosystem: PyPI

Description

Cross Site Scripting (XSS) vulnerability in Arachnys Cabot 0.11.12 can be exploited via the Address column.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI cabot <= 0.11.12 — GHSA-8q2h-4mq6-396j
PyPI cabot all versions — PYSEC-2020-226

References