MEDIUM6.1
PYSEC-2026-626
Cross-site scripting in Contentful
Quick fix
PYSEC-2026-626 — contentful: upgrade to the fixed version with the command below.
pip install --upgrade 'contentful>=1.12.4'Details
Contentful through 2020-05-21 for Python allows reflected XSS, as demonstrated by the api parameter to the-example-app.py.
Are you affected?
Enter the version of the package you're using.