Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/sickrage@9.3.56
purl pkg:pypi/sickrage@9.3.56
Next non-vulnerable version 10.0.12.dev1
Latest non-vulnerable version 2018.3.9.post1
Risk
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-jy3n-ftvu-gbag
Aliases:
CVE-2021-25926
GHSA-x823-j7c4-vpc5
PYSEC-2021-148
In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly in the `quicksearch` feature. Therefore, an attacker can steal a user's sessionID to masquerade as a victim user, to carry out any actions in the context of the user.
10.0.12.dev1
Affected by 0 other vulnerabilities.
VCID-u7hx-ewzk-37c2
Aliases:
CVE-2021-25925
GHSA-rmp7-f2vp-3rq4
PYSEC-2021-147
in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly when processed by the server. Therefore, an attacker can inject arbitrary JavaScript code inside the application, and possibly steal a user’s sensitive information.
10.0.12.dev1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:09:48.196501+00:00 Pypa Importer Affected by VCID-jy3n-ftvu-gbag https://github.com/pypa/advisory-database/blob/main/vulns/sickrage/PYSEC-2021-148.yaml 38.6.0
2026-06-02T04:09:44.775865+00:00 Pypa Importer Affected by VCID-u7hx-ewzk-37c2 https://github.com/pypa/advisory-database/blob/main/vulns/sickrage/PYSEC-2021-147.yaml 38.6.0