cssutils@0.9.6a1 vulnerabilities

A CSS Cascading Style Sheets library for Python

Direct Vulnerabilities

Known vulnerabilities in the cssutils package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Directory Traversal

Affected versions of cssutils are vulnerable to Directory Traversal. cssutils.resolveImports uses sheet.href and showing the full path to a sheet.

How to fix Directory Traversal?

Upgrade cssutils to version 0.9.6a2 or higher.

[,0.9.6a2)