GHSA-c58j-88f5-h53f
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in pycares
5.6 MediumFix available
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
What each source reports
GitHub Advisories Score used
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in pycares
- Record
GHSA-c58j-88f5-h53f- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-79
- Updated
- 2026-11-02
OSV
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in pycares
- Record
GHSA-c58j-88f5-h53f- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-79
- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pycaresPyPI | before 4.2.0 | 4.2.0 |
pycaresPyPI | before 4.2.0, plus listed versions 0.1.00.2.00.3.00.4.00.5.0 Show 27 moreShow less0.6.00.6.10.6.20.6.30.7.01.0.02.0.02.0.12.1.02.1.12.2.02.3.02.4.03.0.03.0.0b03.0.0b13.0.0b23.0.0b33.0.0b43.0.0b53.1.03.1.13.2.03.2.34.0.04.1.14.1.2 | 4.2.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-c58j-88f5-h53f is a medium vulnerability (CVSS 5.6) in pycares, published July 5, 2022. No source lists public exploit code. Fixed in pycares 4.2.0.