—
PYSEC-2021-143
Details
Cross Site Scripting (XSS) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/quokka
Introduced in:
0No fixed version published yet for quokka (pip). Pin to a known-safe version or switch to an alternative.