← All advisories

Medium severity5.4NVD Advisory· Published Jul 29, 2019· Updated Jun 17, 2026

CVE-2019-1020003

CVE-2019-1020003

Description

invenio-records before 1.2.2 allows XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
invenio-recordsPyPI	< 1.0.2	1.0.2
invenio-recordsPyPI	>= 1.1.0, < 1.1.1	1.1.1
invenio-recordsPyPI	>= 1.2.0, < 1.2.2	1.2.2

Affected products

6

Invenio/Invenio Records4 versions
cpe:2.3:a:inveniosoftware:invenio-records:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:inveniosoftware:invenio-records:*:*:*:*:*:*:*:*range: <=1.0.1
- cpe:2.3:a:inveniosoftware:invenio-records:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:inveniosoftware:invenio-records:1.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:inveniosoftware:invenio-records:1.2.1:*:*:*:*:*:*:*
ghsa-coords
pkg:pypi/invenio-records
Range: < 1.0.2
Invenio/invenio-recordsv5
Range: < 1.2.2

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-vxh3-mvv7-265jghsaADVISORY
github.com/inveniosoftware/invenio-records/security/advisories/GHSA-vxh3-mvv7-265jnvdThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2019-1020003ghsaADVISORY
github.com/pypa/advisory-database/tree/main/vulns/invenio-records/PYSEC-2019-27.yamlghsaWEB

News mentions

0

No linked articles in our index yet.