PyPI/fastapi CVE-2021-32677: high 8.2, EPSS 0.72%
Cross-Site Request Forgery (CSRF) in FastAPI
Action: Upgrade fastapi to 0.65.2 or later.
pip install fastapi==0.65.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.65.2 | - |
Fixed versions
| 0.65.2 |
Sources
- osv: GHSA-8h2j-cgx8-6xv7
- https://github.com/tiangolo/fastapi/security/advisories/GHSA-8h2j-cgx8-6xv7
- https://nvd.nist.gov/vuln/detail/CVE-2021-32677
- https://github.com/tiangolo/fastapi/commit/fa7e3c996edf2d5482fff8f9d890ac2390dede4d
- https://github.com/pypa/advisory-database/tree/main/vulns/fastapi/PYSEC-2021-100.yaml
- https://github.com/tiangolo/fastapi
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MATAWX25TYKNEKLDMKWNLYDB34UWTROA
CVE-2021-32677 · published · modified · JSON