PyPI/ultimate-sitemap-parser: high 7.5
Ultimate Sitemap Parser (USP): Gzip Decompression Bomb Bypasses Sitemap Size Limit
Action: Upgrade ultimate-sitemap-parser to 1.8.1 or later.
pip install ultimate-sitemap-parser==1.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.1 | - |
Fixed versions
| 1.8.1 |
Sources
- osv: GHSA-8823-qg2x-pv9f
- https://github.com/GateNLP/ultimate-sitemap-parser/security/advisories/GHSA-8823-qg2x-pv9f
- https://github.com/GateNLP/ultimate-sitemap-parser
published · modified · JSON