Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

dartiss — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting dartiss. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Dartiss is primarily a Python library for handling HTTP requests and web scraping, commonly used for data extraction and automation. Historically, it has been associated with multiple cross-site scripting (XSS) vulnerabilities and remote code execution (RCE) flaws, often stemming from improper input validation and insecure default configurations. The library has accumulated seven CVEs, with several allowing attackers to execute arbitrary code via crafted URLs or manipulate request parameters. While no major public security incidents have been documented, the consistent pattern of vulnerabilities suggests developers should implement strict input sanitization and consider alternative libraries for security-sensitive applications.

CVE ID Title CVSS Severity Published
CVE-2026-49466 Draft List - Contributor Stored Cross-Site Scripting via Draft Title in Custom Drafts Template Attributes — draft-list CWE-79 6.5 Medium 2026-08-12
CVE-2026-48093 Code Embed - Contributor Stored Cross-Site Scripting via Remote URL Embed — code-embed CWE-79 6.5 Medium 2026-08-07
CVE-2026-48094 ShareOpenly has Cross-Site Scripting (XSS) via Missing esc_url() on Shared URL in Content Output — shareopenly CWE-79 5.3 Medium 2026-08-07
CVE-2026-9104 Draft List <= 2.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via Draft Post Title — Draft List CWE-79 6.4 Medium 2026-05-22
CVE-2026-6809 Social Post Embed <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Threads Embed — Social Post Embed CWE-79 6.4 Medium 2026-04-28
CVE-2026-4006 Draft List <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'display_name' Parameter — Draft List CWE-79 6.4 Medium 2026-03-19
CVE-2026-2512 Code Embed <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Fields — Code Embed CWE-79 6.4 Medium 2026-03-18
CVE-2025-11197 Draft List <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting — Draft List CWE-79 6.4 Medium 2025-10-11
CVE-2025-10181 Draft List <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting — Draft List CWE-79 6.4 Medium 2025-09-20
CVE-2024-10814 Code Embed <= 2.5 - Authenticated (Contributor+) Server-Side Request Forgery — Code Embed CWE-918 6.4 Medium 2024-11-09
CVE-2024-8804 Code Embed <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting — Code Embed CWE-79 6.4 Medium 2024-10-04

This page lists every published CVE security advisory associated with dartiss. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.