pagure vulnerabilities (openSUSE)

2 vulnerabilities.

• pagure openSUSE Pagure before 5.6 allows XSS via the templates/blame.html blame view. CVE-2019-11556 Fix available 6.1 MediumSeptember 25, 2020
• pagure openSUSE Pagure 5.2 leaks API keys by e-mailing them to users. Few e-mail servers validate TLS... CVE-2019-7628 Fix available 5.9 MediumFebruary 8, 2019