Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2021-23447

Cross-site Scripting (XSS)

Description

This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array (instead of a string).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a teddy

  • unspecified to < 0.5.9affected

References