—
PYSEC-2024-64
Quick fix
PYSEC-2024-64 — roundup: upgrade to the fixed version with the command below.
pip install --upgrade 'roundup>=2.4.0'Details
Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header.
Are you affected?
Enter the version of the package you're using.