GHSA-894q-wpg5-mf2h

pyRdfa3 Cross-site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-4396

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	pyRdfa3	< 3.6.2	3.6.2

Details

As written in the advisory (Markdown source, shown as plain text).

A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function `_get_option` of the file `pyRdfa/__init__.py`. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e. It is recommended to apply a patch to fix this issue. The identifier VDB-215249 was assigned to this vulnerability.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2022-4396 advisory
https://github.com/RDFLib/pyrdfa3/issues/38 web
https://github.com/RDFLib/pyrdfa3/pull/40 web
https://github.com/RDFLib/pyrdfa3/commit/ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e web
https://github.com/RDFLib/pyrdfa3 package
https://vuldb.com/?id.215249 web