python3Packages.mezzanine
mezzanine 6.1.1 · pkgs/development/python-modules/mezzanine/default.nix
Health
Risk
risk 10 low
- +10 1 open advisory
Version
6.1.1 no newer release in its git tags
Channels
Hydra
succeeded 10y ago
Advisories
PYSEC-2021-343 medium 6.1 Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the component 'admin/blog/blogpost/add/'. This issue is different than CVE-2018-16632. (OSV, for this version)
CVE-2020-19002
Packaging
meta complete
Packagewhat each field means
Description
Content management platform built using the Django framework
Long description
Mezzanine is a powerful, consistent, and flexible content
management platform. Built using the Django framework, Mezzanine
provides a simple yet highly extensible architecture that
encourages diving in and hacking on the code. Mezzanine is BSD
licensed and supported by a diverse and active community.
In some ways, Mezzanine resembles tools such as Wordpress that
provide an intuitive interface for managing pages, blog posts,
form data, store products, and other types of content. But
Mezzanine is also different. Unlike many other platforms that
make extensive use of modules or reusable applications,
Mezzanine provides most of its functionality by default. This
approach yields a more integrated and efficient platform.
Homepage
Download page
License
Platforms
45 platforms: Linux, Darwin
Main program
mezzanine-projectSource provenance
not set: built from source
Outputs
out distStatus
not broken, not insecure, free
Maintainers
Version bumps 0
all open bumpsNone open.
Pull requests 0
None open.
Issues 0
None open.