PVE-2024-73658

Advisory

Affected versions of django_gar are vulnerable to Cross-site Scripting (XSS): CWE-79 and …

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Features - add default GAR_BASE_SUBSCRIPTION_URL to https://abonnement.gar.education.fr/…

[This text has been limited. Please create a free account to view the full text.]

Resources

• https://github.com/briefmnews/django-gar/commit/789144f9a0b2b1714f248f7af2d84fcea021128a
• https://pypi.org/project/django-gar
• https://data.safetycli.com/changelogs/django-gar/