Description
Webrecorder pywb before 2.6.0 allows XSS because it does not ensure that Jinja2 templates are autoescaped.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | pywb | < 2.6.0 | 2.6.0 | GHSA-947x-pv47-pp3q |
Medium · 6.1
CVE-2021-39286
EUVD-2021-0213GHSA-947x-pv47-pp3qPYSEC-2021-120
Cross-site scripting in pywb
Published Aug 18, 2021 · Updated Aug 4, 2024 · Assigned by mitre