| Package | Affected versions | Patched versions |
|---|---|---|
| koji | ≥ 1.34.0, < 1.34.3≥ 1.35.0, < 1.35.1< 1.33.2 | 1.34.31.35.11.33.2 |
A vulnerability in Koji was found. An unsanitized input allows for an XSS attack. Javascript code from a malicious link could be reflected in the resulting web page. It is not expected to be able to submit an action or make a change in Koji due to existing XSS protections in the code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free