PyPI/credsweeper: medium 5.5
CredSweeper: Recursive archive size-limit bypass in deep scanner allows crafted compressed inputs to exhaust resources
Action: Upgrade credsweeper to 1.16.0 or later.
pip install credsweeper==1.16.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.9 | 1.16.0 | - |
Fixed versions
| 1.16.0 |
Sources
- osv: GHSA-9mqm-qcwf-5qhg
- https://github.com/Samsung/CredSweeper/security/advisories/GHSA-9mqm-qcwf-5qhg
- https://github.com/Samsung/CredSweeper
published · modified · JSON