PyPI/shuup CVE-2021-25962: high 8, EPSS 1.09%

CSV injection in shuup

Action: Upgrade shuup to 2.11.0 or later.

pip install shuup==2.11.0

Affected

Fixed versions

Sources

• osv: GHSA-663j-rjcr-789f
• https://nvd.nist.gov/vuln/detail/CVE-2021-25962
• https://github.com/shuup/shuup/commit/0a2db392e8518410c282412561461cd8797eea51
• https://github.com/pypa/advisory-database/tree/main/vulns/shuup/PYSEC-2021-355.yaml
• https://github.com/shuup/shuup
• https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25962

CVE-2021-25962 · published 2021-09-30T20:50:07Z · modified 2024-10-23T18:53:09.461711Z · JSON