Csaf Provider Project Csaf Provider
1 CVEs affecting Csaf Provider Project Csaf Provider. Latest disclosed: 2022-12-13. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-43996 | Medium | 5.4 | 2022-12-13 | The csaf_provider package before 0.8.2 allows XSS via a crafted CSAF document uploaded as text/html. The endpoint upload allows valid CSAF advisories (JSON for… |