Security Advisory

CVE-2026-33140

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-20 20:00:20

Last updated 2026-03-24 18:55:00

Assigner GitHub_M

State PUBLISHED

Description

PySpector is a static analysis security testing (SAST) Framework engineered for modern Python development workflows. PySpector versions 0.1.6 and prior are affected by a stored Cross-Site Scripting (XSS) vulnerability in the HTML report generator. When PySpector scans a Python file containing JavaScript payloads (i.e. inside a string passed to eval() ), the flagged code snippet is interpolated into the HTML report without sanitization. Opening the generated report in a browser causes the embedded JavaScript to execute in the browsers local file context. This issue has been patched in version 0.1.7.

← Browse all CVEs View on cve.org ↗