PyPI/fief-server: critical 10
fief-server Server-Side Template Injection vulnerability
Action: Upgrade fief-server to 0.25.3 or later.
pip install fief-server==0.25.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.19.0 | 0.25.3 | - |
Fixed versions
| 0.25.3 |
Sources
- osv: GHSA-hj8m-9fhf-v7jp
- https://github.com/fief-dev/fief/security/advisories/GHSA-hj8m-9fhf-v7jp
- https://github.com/fief-dev/fief/commit/91e56625b641fa419e2985772266774bae18382b
- https://github.com/fief-dev/fief
- https://github.com/fief-dev/fief/releases/tag/v0.25.3
published · modified · JSON