PyPI/scrapy: medium 6.5

Scrapy allows redirect following in protocols other than HTTP

Action: Upgrade scrapy to 2.11.2 or later.

pip install scrapy==2.11.2

Affected

Fixed versions

Sources

• osv: GHSA-23j4-mw76-5v7h
• https://github.com/scrapy/scrapy/security/advisories/GHSA-23j4-mw76-5v7h
• https://github.com/scrapy/scrapy/issues/457
• https://github.com/scrapy/scrapy/commit/36287cb665ab4b0c65fd53181c9a0ef04990ada6
• https://github.com/scrapy/scrapy

published 2024-05-14T20:14:49Z · modified 2024-11-28T05:42:50.070417Z · JSON