VYPR
← All advisories
High severity8.8NVD Advisory· Published Jun 28, 2024· Updated Jun 17, 2026

CVE-2024-38521

CVE-2024-38521

Description

Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. There is a stored XSS in the Inbox. The input is displayed using the safe Jinja2 attribute, and thus not sanitized upon display. This issue has been patched in version 0.1.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Scidsg/Hushlinellm-fuzzy2 versions
    >=0.1.0+ 1 more
    • (no CPE)range: >=0.1.0
    • (no CPE)range: < 0.1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.