VDB
Sign up
—

PYSEC-2021-33

Quick fix

PYSEC-2021-33 — oncall: upgrade to the fixed version with the command below.

pip install --upgrade 'oncall>=1.4.1'

Details

LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the "No results found for" message in the search bar.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/oncall
Introduced in: 0Fixed in: 1.4.1
Fixpip install --upgrade 'oncall>=1.4.1'

References