tocsin

PyPI/ipsilon CVE-2016-8638: critical 9.1, EPSS 2.14%

Session Fixation in ipsilon

Action: Upgrade ipsilon to 1.0.3 (1.0.x), 1.1.2 (1.1.x), 1.2.1 (1.2.x) or 2.0.2 (2.0.x) or later.

pip install ipsilon==2.0.2
pip install ipsilon==1.2.1
pip install ipsilon==1.1.2
pip install ipsilon==1.0.3

Affected

introducedfixedlast affected
2.0.02.0.2-
1.2.01.2.1-
1.1.01.1.2-
1.0.01.0.3-

Fixed versions

2.0.21.2.11.1.21.0.3

Sources

CVE-2016-8638 · published · modified · JSON