← All advisories

Medium severity6.1NVD Advisory· Published Feb 5, 2021· Updated Jun 17, 2026

CVE-2021-26722

CVE-2021-26722

Description

LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the "No results found for" message in the search bar.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
oncallPyPI	< 1.4.1	1.4.1

Affected products

3

LinkedIn/Oncalldescription
ghsa-coords
pkg:pypi/oncall
Range: < 1.4.1
Linkedin/Oncall
cpe:2.3:a:linkedin:oncall:*:*:*:*:*:*:*:*
Range: <=1.4.0

Patches

Vulnerability mechanics

References

6

github.com/linkedin/oncall/issues/341nvdExploitIssue TrackingThird Party AdvisoryWEB
github.com/advisories/GHSA-rfw2-x9f8-2f6mghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-26722ghsaADVISORY
github.com/linkedin/oncall/commit/843bc106a1c1b1699e9e52b6b0d01c7efe1d6225ghsaWEB
github.com/pypa/advisory-database/tree/main/vulns/oncall/PYSEC-2021-33.yamlghsaWEB
pypi.org/project/oncallghsaWEB

News mentions

0

No linked articles in our index yet.