PyPI/slo-generator CVE-2021-22557: medium 5.3, EPSS 1.58%

Code Injection in SLO Generator

Action: Upgrade slo-generator to 2.0.1 or later.

pip install slo-generator==2.0.1

Affected

Fixed versions

Sources

• osv: GHSA-j28r-j54m-gpc4
• https://nvd.nist.gov/vuln/detail/CVE-2021-22557
• https://github.com/google/slo-generator/pull/173
• https://github.com/google/slo-generator/commit/36318beab1b85d14bb860e45bea186b184690d5d
• https://github.com/google/slo-generator/releases/tag/v2.0.1
• https://github.com/pypa/advisory-database/tree/main/vulns/slo-generator/PYSEC-2021-429.yaml
• http://packetstormsecurity.com/files/164426/Google-SLO-Generator-2.0.0-Code-Execution.html

CVE-2021-22557 · published 2021-10-05T17:53:59Z · modified 2024-10-22T17:00:32.927276Z · JSON