Lucene search
+L

3 matches found

PyPA
PyPA
•added 2026/07/13 2:36 p.m.•23 views

Stored XSS in PySpector HTML Report Generation leads to Javascript Code Execution

SummaryPySpector versions = 0.1.6 are affected by a stored Cross-Site Scripting XSS vulnerability in the HTML report generator. When PySpector scans a Python file containing JavaScript payloads i.e. inside a string passed to eval , the flagged code snippet is interpolated into the HTML report...

6.1CVSS6.3AI score0.00261EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•32 views

PT-2026-59651

Summary PySpector versions = 0.1.6 are affected by a stored Cross-Site Scripting XSS vulnerability in the HTML report generator. When PySpector scans a Python file containing JavaScript payloads i.e. inside a string passed to eval , the flagged code snippet is interpolated into the HTML report...

6.1CVSS6.3AI score0.00261EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2026/03/20 8:00 p.m.•12 views

CVE-2026-33140

PySpector is a static analysis security testing SAST Framework engineered for modern Python development workflows. PySpector versions 0.1.6 and prior are affected by a stored Cross-Site Scripting XSS vulnerability in the HTML report generator. When PySpector scans a Python file containing...

5.3CVSS5.9AI score0.00261EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder