dpaste
A Django based pastebin for text and code.
Activity
- Latest release
- 6y ago
- Total releases
- 21
- Cadence
- ~34 days
- Last 12 months
- 0
Details
- License
- MIT
- First release
- Dec 14, 2013
| Version | Released | |
|---|---|---|
3.5
minor
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
3.4
minor
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
3.3.1
patch
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
3.3
minor
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
3.2
minor
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
3.1
minor
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
3.0
major
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
2.13
minor
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
2.13a0
pre
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
2.12
minor
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
2.11
minor
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
2.10
minor
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
2.8
minor
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
2.7
minor
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
2.6
minor
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
2.5
minor
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
2.4
minor
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
2.3
minor
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
2.2
minor
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
2.1
minor
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
2.0
initial
1 CVE
CVE-2023-49277
PYSEC-2026-1317
GHSA-r8j9-5cj7-cv39
Jul 07, 2026
Reflected XSS Vulnerability in dpaste
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
ImpactA security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized access, data theft, or other malicious activities. Patches
WorkaroundsAt this time, the recommended course of action is to apply the provided patch to the affected systems. No known workarounds have been identified, and applying the patch is the most effective way to remediate the vulnerability. Affected versions
2.0
2.1
2.10
2.11
2.12
2.13
2.13a0
2.2
2.3
2.4
2.5
2.6
+ 10 more Show less
2.7
2.8
2.9
3.0
3.1
3.2
3.3
3.3.1
3.4
3.5
Fixed in
3.8
References
Updated Jul 07, 2026 · Source: OSV.dev |