—
PYSEC-2021-120
Quick fix
PYSEC-2021-120 — pywb: upgrade to the fixed version with the command below.
pip install --upgrade 'pywb>=f7bd84cdacdd665ff73ae8d09a202f60be2ebae9'Details
Webrecorder pywb before 2.6.0 allows XSS because it does not ensure that Jinja2 templates are autoescaped.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/pywb
Introduced in:
0Fixed in: f7bd84cdacdd665ff73ae8d09a202f60be2ebae9Fix
pip install --upgrade 'pywb>=f7bd84cdacdd665ff73ae8d09a202f60be2ebae9'