tocsin

PyPI/recurly CVE-2017-0906: critical 9.8, EPSS 2.62%

Recurly vulnerable to SSRF

Action: Upgrade recurly to 2.0.5 or later.

pip install recurly==2.6.2
pip install recurly==2.5.1
pip install recurly==2.4.5
pip install recurly==2.3.1
pip install recurly==2.2.22
pip install recurly==2.1.16
pip install recurly==2.0.5

Affected

introducedfixedlast affected
2.6.02.6.2-
2.5.02.5.1-
2.4.02.4.5-
2.3.02.3.1-
2.2.02.2.22-
2.1.02.1.16-
02.0.5-

Fixed versions

2.6.22.5.12.4.52.3.12.2.222.1.162.0.5

Sources

CVE-2017-0906 · published · modified · JSON