https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 07:41:55 +0000 https://cve.radiocsirt.org/vuln/cve-2019-16925 <p>Flower 0.9.3 has XSS via the name parameter in an @app.task call. NOTE: The project author stated that he doesn&#39;t think this is a valid vulnerability. Worker name and task name aren’t user facing configuration options. They are internal backend config options and person having rights to change them already has full access</p> <p>Flower 0.9.3 has XSS via the name parameter in an @app.task call. NOTE: The project author stated that he doesn&#39;t think this is a valid vulnerability. Worker name and task name aren’t user facing configuration options. They are internal backend config options and person having rights to change them already has full access</p> https://cve.radiocsirt.org/vuln/cve-2019-16925