webpy CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM webpy CVE published 2026-09-22

CVE-2026-79311

A Cross Site Scripting (XSS) vulnerability exists in webpy web.py version 0.76 via render_jinja.__init__(). This vulnerability allows attackers to inject malicious scripts into web applications built with webpy, potentially leading to unauthorized actions or data breaches. Defenders should assess the impact of this vulnerability on their web applications and prioritize verification of the presence of this [truncated]