PyPI/emailproxy: high 8.1
Expired tokens can be renewed without validating the account password
Action: Upgrade emailproxy to 2023.12.19 or later.
pip install emailproxy==2023.12.19Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2023.12.19 | - |
Fixed versions
| 2023.12.19 |
Sources
- osv: GHSA-9wgg-m99q-hhfc
- https://github.com/simonrob/email-oauth2-proxy/security/advisories/GHSA-9wgg-m99q-hhfc
- https://github.com/simonrob/email-oauth2-proxy/commit/8c874c2ff3d503ac20c7d32f46e08547fcb9e23f
- https://github.com/simonrob/email-oauth2-proxy/commit/eaaa1a2e7a132bf0958dd2f99a749ad98e3212aa
- https://github.com/simonrob/email-oauth2-proxy
- https://github.com/simonrob/email-oauth2-proxy/releases/tag/2023-12-19
published · modified · JSON