—
PYSEC-2021-144
Details
XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/quokka
Introduced in:
0No fixed version published yet for quokka (pip). Pin to a known-safe version or switch to an alternative.