PyPI/multicast: medium
multicast in source builds from vulnerable setuptools dependency
Action: Upgrade multicast to 2.0.9a0 or later.
pip install multicast==2.0.9a0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.9a0 | - |
Fixed versions
| 2.0.9a0 |
Sources
- osv: GHSA-94v7-wxj6-r2q5
- https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf
- https://github.com/reactive-firewall/multicast/security/advisories/GHSA-94v7-wxj6-r2q5
- https://github.com/pypa/setuptools/issues/4946
- https://github.com/reactive-firewall/multicast/commit/c5c7c7de272421d944beca8452871bca6bfd151f
- https://github.com/reactive-firewall/multicast
- https://github.com/reactive-firewall/multicast/blob/c5c7c7de272421d944beca8452871bca6bfd151f/docs/requirements.txt#L27
- https://github.com/reactive-firewall/multicast/blob/c5c7c7de272421d944beca8452871bca6bfd151f/pyproject.toml#L2
- https://github.com/reactive-firewall/multicast/blob/c5c7c7de272421d944beca8452871bca6bfd151f/requirements.txt#L26
- https://github.com/reactive-firewall/multicast/blob/c5c7c7de272421d944beca8452871bca6bfd151f/tests/requirements.txt#L32
published · modified · JSON