PyPI/fickling: high
Fickling missing RCE-capable modules in UNSAFE_IMPORTS
Action: Upgrade fickling to 0.1.9 or later.
pip install fickling==0.1.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.9 | - |
Fixed versions
| 0.1.9 |
Sources
- osv: GHSA-5hwf-rc88-82xm
- https://github.com/trailofbits/fickling/security/advisories/GHSA-5hwf-rc88-82xm
- https://github.com/trailofbits/fickling/commit/ffac3479dbb97a7a1592d85991888562d34dd05b
- https://github.com/trailofbits/fickling
published · modified · JSON