[GHSA-6vhp-hp77-6w52] Trac HTML WikiProcessor cross-site scripting (XSS) vulnerability

[rhdesmond]

Updates

• Affected products
• CVSS v3

Comments
Correcting patched version: https://github.com/pypa/advisory-database/blob/main/vulns/trac/PYSEC-2005-1.yaml

[shelbyc]

Hi @rhdesmond, my teammates and I chose 0.9-stable as the fixed version because https://trac.edgewall.org/ticket/2473#comment:7 indicates that a fix for CVE-2005-4644 is present in 0.9-stable, but some other resources such as https://trac.edgewall.org/ticket/2473#comment:6 and https://web.archive.org/web/20200302062847/https://www.securityfocus.com/bid/16198/solution indicate 0.9.3 could also be acceptable. Where are you and/or PyPA getting 10.0?

[github-actions]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.