PyPI/fickling: low
Fickling has a detection bypass via stdlib network-protocol constructors
Action: Upgrade fickling to 0.1.8 or later.
pip install fickling==0.1.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.8 | - |
Fixed versions
| 0.1.8 |
Sources
- osv: GHSA-83pf-v6qq-pwmr
- https://github.com/trailofbits/fickling/security/advisories/GHSA-83pf-v6qq-pwmr
- https://github.com/trailofbits/fickling/pull/233
- https://github.com/trailofbits/fickling/commit/6d20564d23acf14b42ec883908aed159be7b9ade
- https://github.com/trailofbits/fickling
published · modified · JSON