Tempura

CVEs (1)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2021-23784	Tempura Project Tempura	Med	0.28	5.4	0.01		Nov 3, 2021	This affects the package tempura before 0.4.0. If the input to the esc function is of type object (i.e an array) it is returned without being escaped/sanitized, leading to a potential Cross-Site Scripting vulnerability.

CVE-2021-23784MedNov 3, 2021
Tempura Project
Tempura
risk 0.28cvss 5.4epss 0.01
This affects the package tempura before 0.4.0. If the input to the esc function is of type object (i.e an array) it is returned without being escaped/sanitized, leading to a potential Cross-Site Scripting vulnerability.