A vulnerability in the HTML_QuickForm package has been found which potentially allows remote code execution.
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2019-0049.json"