PyPI/openc3 CVE-2024-46977: medium 6.5, EPSS 0.91%

OpenC3 Path Traversal via screen controller (`GHSL-2024-127`)

Action: Upgrade openc3 to 5.19.0 or later.

pip install openc3==5.19.0

Affected

Fixed versions

Sources

• osv: GHSA-8jxr-mccc-mwg8#PyPI/openc3
• https://github.com/OpenC3/cosmos/security/advisories/GHSA-8jxr-mccc-mwg8
• https://nvd.nist.gov/vuln/detail/CVE-2024-46977
• https://github.com/OpenC3/cosmos/commit/a34e61aea5a465f0ab3e57d833ae7ff4cafd710b
• https://github.com/OpenC3/cosmos
• https://github.com/pypa/advisory-database/tree/main/vulns/openc3/PYSEC-2024-101.yaml
• https://rubysec.com/advisories/CVE-2024-46977
• https://securitylab.github.com/advisories/GHSL-2024-127_GHSL-2024-129_OpenC3_COSMOS

CVE-2024-46977 · published 2024-10-02T19:29:32Z · modified 2024-10-31T14:00:54.475406Z · JSON