GHSA-2r6g-7r83-jg72: `spam` project on PyPI compromised, malicious releases made

GHSA-qr4w-53vh-m672: opencv-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863

GHSA-cxjf-x6jp-p7mc: opencv-contrib-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863

GHSA-jh2j-j4j9-crg3: opencv-python-headless bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863

GHSA-w2pj-9cgh-mq2c: opencv-contrib-python-headless bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863

Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header.

**Roundup Cross-site Scripting Vulnerability**

Moderate severity GitHub Reviewed Published Jul 17, 2024 to the GitHub Advisory Database • Updated Jul 17, 2024

Headline

GHSA-xjgw-ghrx-wfff: Roundup Cross-site Scripting Vulnerability

ghsa: Latest News