—
PYSEC-2018-54
Quick fix
PYSEC-2018-54 — flask-admin: upgrade to the fixed version with the command below.
pip install --upgrade 'flask-admin>=1.5.3'Details
helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL.
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://github.com/flask-admin/flask-admin/pull/1699[WEB]
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZU2VKULURVXEU4YFTLMBQGYMPSXQ4MBN/[WEB]
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJIYCWIH3BRLI2QNC53CQXLKVP27X7EH/[WEB]
- https://github.com/advisories/GHSA-894g-6j7q-2hx6[ADVISORY]