Debian Security Advisory DSA 953-1 – Several cross-site scripting vulnerabilities have been discovered in flyspray, a lightweight bug tracking system, which allows attackers to insert arbitrary script code into the index page.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/43349/dsa-953-1.txt
Source: https://packetstormsecurity.com/files/43349/Debian-Linux-Security-Advisory-953-1.html