Approved changes feed: RSS · Atom
cpe:2.3:a:hushline:hush_line:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Hushline (13d1b2f0-e554-5f57-a9b7-145194058473) |
|---|---|
| Product | Hush Line (63b034fd-aef3-57a7-95a7-580295183ffe) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/scidsg/hushline |
purl2cpe | 2026-06-01 10:13:41.316824 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-38522 |
vulnerable | 2026-06-08 06:41:47.624587 |
CSP bypass in Hush Line
MEDIUM (6.3)
Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. The CSP policy applied on the `tips.hushline.app` website and bundled by default in this repository is trivial to bypass. This vulnerability has been patched in version 0.1.0.
Published: 2024-06-28T17:03:19.661Z
Updated: 2024-08-02T04:12:25.177Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38521 |
vulnerable | 2026-06-08 06:41:47.624079 |
Persistent Cross-Site Scripting (XSS) in hushline inbox
HIGH (8.8)
Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. There is a stored XSS in the Inbox. The input is displayed using the `safe` Jinja2 attribute, and thus not sanitized upon display. This issue has been patched in version 0.1.0.
Published: 2024-06-28T15:33:21.032Z
Updated: 2024-08-02T04:12:25.140Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.