Vulnerability	Vulnerable Version
M Timing Attack pyramid is a Python Web Framework. Affected versions of this package are vulnerable to Timing Attack. The `AuthTktAuthenticationPolicy` does not use a timing-attack-aware string comparator. How to fix Timing Attack? Upgrade `pyramid` to version 1.3a1 or higher.	[,1.3a1)
M Timing Attack pyramid is a Python Web Framework. Affected versions of this package are vulnerable to Timing Attack. Several timing attack vectors exist in the `AuthTktCookieHelper` and the `SignedCookieSessionFactory` as well as via CSRF tokens. How to fix Timing Attack? Upgrade `pyramid` to version 1.6a1 or higher.	[,1.6a1)
H Cross-site Scripting (XSS) pyramid is a Python Web Framework. Affected versions of this package are vulnerable to Cross-site Scripting (XSS). The default Mako renderer was not configured to escape all HTML in expression tags. How to fix Cross-site Scripting (XSS)? Upgrade `pyramid` to version 1.1a1 or higher.	[,1.1a1)
M Cross-site Scripting (XSS) Affected versions of `pyramid` are vulnerable to Cross-Site Scripting (XSS) attack. How to fix Cross-site Scripting (XSS)? Upgrade `pyramid` to version 1.6a2 or higher.	[,1.6a2)

Go back to all versions of this package