Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/sickrage@9.4.179
purl pkg:pypi/sickrage@9.4.179
Next non-vulnerable version 10.0.12.dev1
Latest non-vulnerable version 10.0.12.dev1
Risk
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-9ecn-dwux-93b8
Aliases:
CVE-2021-25925
GHSA-rmp7-f2vp-3rq4
PYSEC-2021-147
in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly when processed by the server. Therefore, an attacker can inject arbitrary JavaScript code inside the application, and possibly steal a user’s sensitive information.
10.0.12.dev1
Affected by 0 other vulnerabilities.
VCID-tj9t-5zn5-e3ca
Aliases:
CVE-2021-25926
GHSA-x823-j7c4-vpc5
PYSEC-2021-148
In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly in the `quicksearch` feature. Therefore, an attacker can steal a user's sessionID to masquerade as a victim user, to carry out any actions in the context of the user.
10.0.12.dev1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-30T20:22:37.430494+00:00 Pypa Importer Affected by VCID-tj9t-5zn5-e3ca https://github.com/pypa/advisory-database/blob/main/vulns/sickrage/PYSEC-2021-148.yaml 38.6.0
2026-05-30T20:22:34.127536+00:00 Pypa Importer Affected by VCID-9ecn-dwux-93b8 https://github.com/pypa/advisory-database/blob/main/vulns/sickrage/PYSEC-2021-147.yaml 38.6.0