Approved changes feed: RSS · Atom

cpe:2.3:a:yola:yolapi:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorYola (34ccac54-97ee-5812-b971-459f95538461)
ProductYolapi (8e75effb-3540-50a1-a01f-3e8b58631c71)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-25056 vulnerable 2026-06-08 05:11:29.270547 yolapi metadata.py render_description cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, was found in yolapi. Affected is the function render_description of the file yolapi/pypi/metadata.py. The manipulation of the argument text leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is a0fe129055a99f429133a5c40cb13b44611ff796. It is recommended to apply a patch to fix this issue. VDB-216966 is the identifier assigned to this vulnerability.
Published: 2022-12-28T11:32:54.972Z
Updated: 2024-08-05T12:26:39.643Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.