PyPI/django-celery-results CVE-2020-17495: high 7.5, EPSS 0.87%

django-celery-results Stores Sensitive Information In Cleartext

Action: Upgrade django-celery-results to 2.4.0 or later.

pip install django-celery-results==2.4.0

Affected

Fixed versions

Sources

• osv: GHSA-fvx8-v524-8579
• https://nvd.nist.gov/vuln/detail/CVE-2020-17495
• https://github.com/celery/django-celery-results/issues/142
• https://github.com/celery/django-celery-results/issues/154
• https://github.com/celery/django-celery-results/pull/316
• https://github.com/celery/django-celery-results/commit/ad508fe3433499e5fc94645412d911e174863f28
• https://github.com/advisories/GHSA-fvx8-v524-8579
• https://github.com/celery/django-celery-results
• https://github.com/pypa/advisory-database/tree/main/vulns/django-celery-results/PYSEC-2020-38.yaml

CVE-2020-17495 · published 2021-06-04T21:46:52Z · modified 2024-09-13T20:24:58.165561Z · JSON