Cabot Cross Site Scripting (XSS) vulnerability via Endpoint column

高危 8.2CVE-2020-7734 · GHSA-mqwh-r366-4224 · PYSEC-2020-227 · Published 22/09/2020 · updated 17/06/2026

要点

Package	Affected versions	Patched versions
cabot PyPI	`≤ 0.11.16all versions`	No fix yet
cabot arachnys	`≤ 0.11.16`	No fix yet

All versions up to 0.11.16 of package cabot are vulnerable to Cross-site Scripting (XSS) via the Endpoint column.

NVD description

All versions of package cabot are vulnerable to Cross-site Scripting (XSS) via the Endpoint column.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.