PVE-2023-55193

Advisory

Flower before 0.9.2 has a XSS on tasks page because data is not properly escaped.

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/advisories/GHSA-94ww-22rx-493x
• https://github.com/mher/flower/issues/650
• https://github.com/mher/flower/commit/0f2eab324f65823340a0146f7a2b44804e4725ee
• https://pypi.org/project/flower