~ / search / GHSA-6hcj-qrw3-m66q

GHSA-6hcj-qrw3-m66q

Fava vulnerable to reflected cross-site scripting

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-2589

Packages

EcosystemPackageAffectedFixed in
PyPI fava < 1.22.3 1.22.3

Details

As written in the advisory (Markdown source, shown as plain text).

Fava before 1.22.3 is vulnerable to reflected cross-site scripting due to improper validation on filter conversion.

References

External links from the advisory. They lead to third-party sites.