HatBoy

XML External Entity (XXE) Vulnerability in Latest Release

1

Hi, I would like to report XML External Entity (XXE) vulnerability in latest release. Description: XML External Entity (XXE) vulnerability in quokka/utils/atom.py 157 line and auokka/core/content/views.py 94 line, Because there...

Cross Site Scripting Vulnerability in Latest Release

1

Hi, I would like to report Cross Site Scripting vulnerability in latest release. Description: Cross-site scripting (XSS) vulnerability inquokka/admin/actions.py 90, 151 line, Because there is no filter username. The vulnerability...

Cross Site Scripting Vulnerability in Latest Release

2

Hi, I would like to report Cross Site Scripting vulnerability in latest release. Description: Cross-site scripting (XSS) vulnerability in app/api/cms/user.py 12 line register() function and app/api/cms/log.py 23 line get_logs() function....

Login brute force Vulnerability in Latest Release

2

Hi, I would like to report login brute force vulnerability in latest release. Description: Login brute force vulnerability in app/api/cms/user.py 43 line login() function. No need to limit the number...

为什么不支持Python3

5

请问为什么不支持Python3，是那些地方不兼容，如果改为兼容Python3需要修改哪些地方。另外请问该库绑定KCP是实现了KCP的所有函数还是只实现了部分函数