Yola Security Vulnerabilities

CVE-2018-25056

A vulnerability, which was classified as problematic, was found in yolapi. Affected is the function render_description of the file yolapi/pypi/metadata.py. The manipulation of the argument text leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is a0f...

CVE-2020-7723

All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function.