GHSA-fr62-mg2q-7wqv
In-memory stored Cross-site scripting (XSS) vulnerability in pineconesim
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/matrix-org/pinecone | <= 0.11.0 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
The Pinecone Simulator (pineconesim) included in Pinecone up to commit https://github.com/matrix-org/pinecone/commit/ea4c33717fd74ef7d6f49490625a0fa10e3f5bbc is vulnerable to stored cross-site scripting. The payload storage is not permanent and will be wiped when restarting pineconsim.
### Patches
Commit https://github.com/matrix-org/pinecone/commit/218b2801995b174085cb1c8fafe2d3aa661f85bd contains the fixes.
### Workarounds
N/A
### For more information
If you have any questions or comments about this advisory, please email us at [security at matrix.org](mailto:[email protected]).
References
External links from the advisory. They lead to third-party sites.