PyPI/roundup CVE-2014-6276: medium 4.3, EPSS 1.55%

Roundup sensitive data disclosure vulnerability

Action: Upgrade roundup to 1.5.1 or later.

pip install roundup==1.5.1

Affected

Fixed versions

Sources

• osv: GHSA-j556-q367-2gw6
• https://nvd.nist.gov/vuln/detail/CVE-2014-6276
• https://github.com/pypa/advisory-database/tree/main/vulns/roundup/PYSEC-2016-33.yaml
• https://github.com/roundup-tracker/roundup
• https://sourceforge.net/p/roundup/code/ci/tip/tree/CHANGES.txt
• http://hg.code.sf.net/p/roundup/code/rev/a403c29ffaf9
• http://www.debian.org/security/2016/dsa-3502

CVE-2014-6276 · published 2022-05-17T03:56:49Z · modified 2024-10-26T22:49:52.038610Z · JSON