MapProxy version 1.10.3 and older is vulnerable to a Cross Site Scripting attack in the demo service resulting in possible information disclosure.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-1000426.json"