Moderate severity vulnerability that affects roundup

Description

References

• nvd.nist.gov/vuln/detail/CVE-2019-10904 · ADVISORY
• python/bugs.python.org · WEB
• bugs.python.org/issue36391 · WEB
• pypa/advisory-database · WEB
• roundup-tracker/roundup · PACKAGE
• lists.debian.org/debian-lts-announce/2019/04/msg00009.html · WEB
• pypi.org/project/roundup/2.0.0alpha0 · WEB
• openwall.com/lists/oss-security/2019/04/05/1 · WEB
• openwall.com/lists/oss-security/2019/04/07/1 · WEB
• GitHub Advisory GHSA-926q-wxr6-3crq · ADVISORY

Mais vulnerabilidades de roundup

• CVE-2025-53865MÉDIO 6.4In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates (devel and responsive).
• CVE-2024-39126MÉDIO 5.4Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents.
• CVE-2024-39125MÉDIO 5.4Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header.
• CVE-2024-39124MÉDIO 5.4In Roundup before 2.4.0, classhelpers (_generic.help.html) allow XSS.
• CVE-2012-6133MÉDIO 6.1Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML v…