CVE catalog
CVE-2022-4396
python-pyrdfa: CVE-2022-4396
- Severity
- Medium
- Source
- [NVD] · [CVE record]
- EPSS
- 0.61% · Oct 27, 2026
A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function _get_option of the file pyRdfa/__init__.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e. It is recommended to apply a patch to fix this issue. The identifier VDB-215249 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | python-pyrdfa | sid | 3.6.5+ds-1 | fixed |
| Debian | python-pyrdfa | forky | 3.6.5+ds-1 | fixed |
| Debian | python-pyrdfa | trixie | 3.6.4+ds-1 | fixed |
| Debian | python-pyrdfa | bookworm | 3.5.2+20220621~ds-1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | python-pyrdfa | source | sid | 3.5.2+20220329~ds-1 | not yet assigned | Not reported | [1026051] |
| Debian | python-pyrdfa | source | forky | 3.5.2+20220329~ds-1 | not yet assigned | Not reported | [1026051] |
| Debian | python-pyrdfa | source | trixie | 3.5.2+20220329~ds-1 | not yet assigned | Not reported | [1026051] |
| Debian | python-pyrdfa | source | bookworm | 3.5.2+20220329~ds-1 | not yet assigned | Not reported | [1026051] |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [python3-pyrdfa]Fixed
Source package: [python-pyrdfa]
Details (2)
3.5.2+20220621~ds-1· all · bookwormFixed · Fixed:
3.5.2+20220329~ds-1dsa · python-pyrdfa · debian · bookworm
3.5.2+20220621~ds-1· all · bookwormFixed · Fixed:
3.5.2+20220329~ds-1dsa · python-pyrdfa · debian · bookworm
Observed: