Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2021-23447

Cross-site Scripting (XSS)

This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array (instead of a string).

CVSS 3.1 · 5.4 Medium EPSS 1.1% KEV · Not listed
Vendors
Teddy Project
Products
Teddy