Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2020-18705

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-4q2r-qxp6-h5j6

Improper Restriction of XML External Entity Reference in Quokka XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'.

gitlab/pypi/quokka/CVE-2020-18705

Improper Restriction of XML External Entity Reference in Quokka XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'.

pypa/quokka/PYSEC-2021-145

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'.

pysec/PYSEC-2021-145

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'.