docassemble@1.4.54 vulnerabilities
The namespace package for the docassemble system.
-
latest version
1.4.104
-
latest non vulnerable version
-
first published
7 years ago
-
latest version published
3 days ago
-
licenses detected
- [0,)
Direct Vulnerabilities
Known vulnerabilities in the docassemble package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
docassemble is an A free, open-source expert system for guided interviews and document assembly, based on Python, YAML, and Markdown. Affected versions of this package are vulnerable to Open Redirect due to improper validation of user-supplied input. An attacker can redirect users to an untrusted page by manipulating the URL parameters to point to a malicious site. How to fix Open Redirect? Upgrade |
[,1.4.97)
|