PyPI/app-store-server-library: medium
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Action: Upgrade app-store-server-library to 3.1.2 or later.
pip install app-store-server-library==3.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.2.0 | 3.1.2 | - |
Fixed versions
| 3.1.2 |
Sources
- osv: GHSA-8f6j-263m-g72x
- https://github.com/apple/app-store-server-library-python/security/advisories/GHSA-8f6j-263m-g72x
- https://github.com/apple/app-store-server-library-python
published · modified · JSON