{"id":"CVE-2019-1020019","details":"invenio-previewer before 1.0.0a12 allows XSS.","aliases":["GHSA-j9m2-6hq2-4r3c","PYSEC-2019-26"],"modified":"2026-07-09T01:30:30.171805Z","published":"2019-07-29T14:15:11.317Z","references":[{"type":"EVIDENCE","url":"https://github.com/inveniosoftware/invenio-previewer/security/advisories/GHSA-j9m2-6hq2-4r3c"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/inveniosoftware/invenio-previewer","events":[{"introduced":"d80b572017850b245fb098341946f31e2090a903"},{"last_affected":"93ba3291fc733a1cdf4301599fb198c9b65eba6f"}],"database_specific":{"cpe":["cpe:2.3:a:inveniosoftware:invenio-previewer:0.1.0:*:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-previewer:1.0.0:a1:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-previewer:1.0.0:a10:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-previewer:1.0.0:a11:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-previewer:1.0.0:a12:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-previewer:1.0.0:a2:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-previewer:1.0.0:a3:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-previewer:1.0.0:a4:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-previewer:1.0.0:a5:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-previewer:1.0.0:a6:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-previewer:1.0.0:a7:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-previewer:1.0.0:a8:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-previewer:1.0.0:a9:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0.1.0"},{"last_affected":"0.1.0"},{"introduced":"1.0.0-a1"},{"last_affected":"1.0.0-a1"},{"introduced":"1.0.0-a10"},{"last_affected":"1.0.0-a10"},{"introduced":"1.0.0-a11"},{"last_affected":"1.0.0-a11"},{"introduced":"1.0.0-a12"},{"last_affected":"1.0.0-a12"},{"introduced":"1.0.0-a2"},{"last_affected":"1.0.0-a2"},{"introduced":"1.0.0-a3"},{"last_affected":"1.0.0-a3"},{"introduced":"1.0.0-a4"},{"last_affected":"1.0.0-a4"},{"introduced":"1.0.0-a5"},{"last_affected":"1.0.0-a5"},{"introduced":"1.0.0-a6"},{"last_affected":"1.0.0-a6"},{"introduced":"1.0.0-a7"},{"last_affected":"1.0.0-a7"},{"introduced":"1.0.0-a8"},{"last_affected":"1.0.0-a8"},{"introduced":"1.0.0-a9"},{"last_affected":"1.0.0-a9"}],"source":"CPE_STRING"}}],"versions":["0.1.0","1.0.0-a1","1.0.0-a10","1.0.0-a11","1.0.0-a12","1.0.0-a2","1.0.0-a3","1.0.0-a4","1.0.0-a5","1.0.0-a6","1.0.0-a7","1.0.0-a8","1.0.0-a9","v1.0.0a9","v1.0.0a8","v1.0.0a7","v1.0.0a6","v1.0.0a5","v1.0.0a4","v1.0.0a3","v1.0.0a2","v1.0.0a1","v0.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-1020019.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}