PyPI/dirac: high 8.5
DIRAC: SQL injection and lack of access control in PilotManager service
Action: Upgrade dirac to 8.0.79 or later.
pip install dirac==8.0.79pip install dirac==9.0.22pip install dirac==9.1.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 6 | 8.0.79 | - |
| 8.1.0a1 | 9.0.22 | - |
| 9.1.0 | 9.1.10 | - |
Fixed versions
| 8.0.79 | 9.0.22 | 9.1.10 |
Sources
- osv: GHSA-7xw9-549r-8jrc
- https://github.com/DIRACGrid/DIRAC/security/advisories/GHSA-7xw9-549r-8jrc
- https://github.com/DIRACGrid/DIRAC
- https://pypi.org/project/DIRAC/8.0.79
- https://pypi.org/project/DIRAC/9.0.22
- https://pypi.org/project/DIRAC/9.1.10
published · modified · JSON