VDB
Sign up
—

PYSEC-2019-19

Quick fix

PYSEC-2019-19 — django-js-reverse: upgrade to the fixed version with the command below.

pip install --upgrade 'django-js-reverse>=0.9.1'

Details

django-js-reverse (aka Django JS Reverse) before 0.9.1 has XSS via js_reverse_inline.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/django-js-reverse
Introduced in: 0Fixed in: 0.9.1
Fixpip install --upgrade 'django-js-reverse>=0.9.1'

References