XSS in Parzivalhack Pyspector

CVE-2026-33140

PySpector is a static analysis security testing (SAST) Framework engineered for modern Python development workflows. PySpector versions 0.1.6 and prior are affected by a stored Cross-Site Scripting (XSS) vulnerability in the HTML report ge…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.000 (4.4th percentile) — read the EPSS interpretation.

Affected products

Parzivalhack Pyspector — versions < 0.1.7

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

https://github.com/ParzivalHack/PySpector/security/advisories/GHSA-2gmv-2r3v-jxj2 (x_refsource_CONFIRM)