cvssnot scored
how bad it is if exploited, out of 10
epss0.60%
chance of exploitation in the next 30 days
xyz scorenot scored
CyberXYZ composite, out of 10
fig. 01 — GHSA-gvxv-p9rv-gmcg, the advisory selected below
// advisories
GHSA-gvxv-p9rv-gmcg
UNKNOWNCVE-2022-33156The extension fails to properly encode user input for output in HTML context. A TYPO3 backend user account is required to exploit the vulnerability.
- Affected
- >=0, <1.3.2
- Fixed in
- 1.3.2
- Published
- 2022-06-17
- Source
- github
GHSANVDMITRE
// ai model usageTracked for PyPI packages. HuggingFace models declare Python dependencies, so nuget packages are not covered.
Checked 2026-09-22 at 00:55 UTC. The most recent advisory here was published 2022-06-17. Updated continuously from NVD, GHSA, OSV and CNA feeds.