Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix CVE #8856

Closed
wants to merge 1 commit into from
Closed

Fix CVE #8856

wants to merge 1 commit into from

Conversation

sbrunner
Copy link
Member

@sbrunner sbrunner commented Oct 3, 2022

Title: [1084344] jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label
Severity: moderate
CWE: CWE-79
Vulnerable versions: <1.13.2
Patched versions: >=1.13.2
Recommendation: Upgrade to version 1.13.2 or later
Version: 1.13.0
Path: jquery-ui
More info: GHSA-h6gj-6jjq-h8g9

-> Vulnerability found in mako version 1.1.2
Vulnerability ID: 50870
Affected spec: <1.2.2
ADVISORY: Mako 1.2.2 includes a fix for a REDoS
vulnerability.sqlalchemy/mako#366
PVE-2022-50870
For more information, please visit
https://pyup.io/vulnerabilities/PVE-2022-50870/50870/

  Title: [1084344] jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label
  Severity: moderate
  CWE: CWE-79
  Vulnerable versions: <1.13.2
  Patched versions: >=1.13.2
  Recommendation: Upgrade to version 1.13.2 or later
  Version: 1.13.0
  Path: jquery-ui
  More info: GHSA-h6gj-6jjq-h8g9

  -> Vulnerability found in mako version 1.1.2
     Vulnerability ID: 50870
     Affected spec: <1.2.2
     ADVISORY: Mako 1.2.2 includes a fix for a REDoS
     vulnerability.sqlalchemy/mako#366
     PVE-2022-50870
     For more information, please visit
     https://pyup.io/vulnerabilities/PVE-2022-50870/50870/
Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@sbrunner sbrunner closed this Oct 3, 2022
@sbrunner sbrunner deleted the audit25 branch December 12, 2022 10:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant