PYSEC-2019-27

2019-07-2915:15:00

Google

osv.dev

0.001 Low

EPSS

Percentile

22.7%

JSON

invenio-records before 1.2.2 allows XSS.

CPENameOperatorVersion
invenio-recordseq1.0.0a6
invenio-recordseq1.0.0b3
invenio-recordseq1.0.0a10
invenio-recordseq1.0.0a14
invenio-recordseq0.3.2
invenio-recordseq1.0.0a15
invenio-recordseq0.1.0
invenio-recordseq1.0.0a3
invenio-recordseq1.0.0
invenio-recordseq1.0.0a5

Name	Operator	Version
invenio-records	eq	1.0.0a6
invenio-records	eq	1.0.0b3
invenio-records	eq	1.0.0a10
invenio-records	eq	1.0.0a14
invenio-records	eq	0.3.2
invenio-records	eq	1.0.0a15
invenio-records	eq	0.1.0
invenio-records	eq	1.0.0a3
invenio-records	eq	1.0.0
invenio-records	eq	1.0.0a5