2 matches found
CVE-2025-55165 Autocaliweb Exposure of Sensitive Information to an Unauthorized Actor in `config_sql.py`
Autocaliweb is a web app that offers an interface for browsing, reading, and downloading eBooks using a valid Calibre database. Prior to version 0.8.3, the debug pack generated by Autocaliweb can expose sensitive configuration data, including API keys. This occurs because the todict method, used ...
openSUSE Security Update : python-mistune (openSUSE-2018-148)
This update for python-mistune to version 0.8.3 fixes several issues. These security issues were fixed : - CVE-2017-16876: Cross-site scripting XSS vulnerability in the keyify function in mistune.py allowed remote attackers to inject arbitrary web script or HTML by leveraging failure to escape th...