—

PYSEC-2020-60

Quick fix

PYSEC-2020-60 — locust: upgrade to the fixed version with the command below.

pip install --upgrade 'locust>=1.3.2'

Details

A stored cross-site scripting (XSS) vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/locust

Introduced in: 0Fixed in: 1.3.2

Fixpip install --upgrade 'locust>=1.3.2'

References

https://docs.locust.io/en/stable/changelog.html[WEB]
https://github.com/advisories/GHSA-vqxw-9pg7-v7v9[ADVISORY]