PyPI/fickling: medium
fickling's `platform` module subprocess invocation evades `check_safety()` with `LIKELY_SAFE`
Action: Upgrade fickling to 0.1.10 or later.
pip install fickling==0.1.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.10 | - |
Fixed versions
| 0.1.10 |
Sources
- osv: GHSA-5cxw-w2xg-2m8h
- https://github.com/trailofbits/fickling/security/advisories/GHSA-5cxw-w2xg-2m8h
- https://github.com/trailofbits/fickling/commit/351ed4d4242b447c0ffd550bb66b40695f3f9975
- https://github.com/trailofbits/fickling
- https://github.com/trailofbits/fickling/releases/tag/v0.1.10
published · modified · JSON