# PyPI (Python Infrastructure): Failure to Escape HTML on PyPI

> PyPI (Python Infrastructure) status incident “Failure to Escape HTML on PyPI” on 2015-08-27: impact none (vendor’s label), 0 min, 1 update(s). Archived by Rewindex.

Canonical: https://rewindex.com/company/pypi/incidents/853rfsjhxs71
Last updated: 2015-08-27T23:51:00Z

- Impact (vendor’s label): none
- Status: resolved
- Started: 2015-08-27 23:51 UTC · Resolved: 2015-08-27 23:51 UTC · Duration: 0 min
- Updates: 1
- [Vendor status page: https://status.python.org/incidents/853rfsjhxs71](https://status.python.org/incidents/853rfsjhxs71)
- [Company: PyPI (Python Infrastructure)](https://rewindex.com/company/pypi.md)

## Timeline of updates

- **resolved** 2015-08-27 23:51 UTC: It has come to our attention that in certain cases PyPI failed to correctly escape HTML that was uploaded as the long\_description for projects. This was specific to projects whose long\_description fields did not successfully render as reStructuredText and fell back to the plaintext rendering code. It was introduced in commit e2ea08abfb on 2015-01-24. We have found no evidence of any projects exploiting this and we do not believe that anyone is at risk. This issue was discovered by Keryn Knight whom we'd like to thank for finding it and reporting it to us. The timeline of what occured is: \* 2015-08-26 @ 1700 UTC - I received an email by Keryn Knight reporting the issue. \* 2015-08-26 @ 1703 UTC - I responded to the email confirming the problem and asserting I’d have the problem fixed shortly. \* 2015-08-26 @ 1743 UTC - Fixes pushed to https://testpypi.python.org/ \* 2015-08-26 @ 1746 UTC - Fixes pushed to https://pypi.python.org/ \* 2015-08-26 @ 1805 UTC - Fixes pushed to https://warehouse-staging.python.org/ \* 2015-08-26 @ 1809 UTC - Fixes pushed to https://warehouse.python.org/ \* 2015-08-26 @ 1815 UTC - Emailed Keryn Knight confirming the fix had been deployed. - Donald Stufft

_From the vendor’s published history: only the final update text is available for incidents before Rewindex began polling this page._

## Cite this

Status incident (vendor impact label: none) posted by PyPI (Python Infrastructure), started 2015-08-27 23:51 UTC, resolved after 0 min, 1 update(s).

- Canonical URL: https://rewindex.com/company/pypi/incidents/853rfsjhxs71
- Citation: PyPI (Python Infrastructure), “Failure to Escape HTML on PyPI” (2015-08-27 23:51 UTC). Archived by Rewindex: https://rewindex.com/company/pypi/incidents/853rfsjhxs71 (CC BY 4.0).
- Markdown link: `[PyPI (Python Infrastructure): Failure to Escape HTML on PyPI (2015-08-27)](https://rewindex.com/company/pypi/incidents/853rfsjhxs71)`


---
Canonical: https://rewindex.com/company/pypi/incidents/853rfsjhxs71 · Markdown: https://rewindex.com/company/pypi/incidents/853rfsjhxs71.md · JSON: https://rewindex.com/api/v1/companies/pypi/incidents/853rfsjhxs71 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T16:05:53.174Z