PyPI/pypiserver CVE-2019-6802: medium 6.1, EPSS 3.80%

CRLF Injection in pypiserver

Action: Upgrade pypiserver to 1.2.6 or later.

pip install pypiserver==1.2.6

Affected

Fixed versions

Sources

• osv: GHSA-mh24-7wvg-v88g
• https://nvd.nist.gov/vuln/detail/CVE-2019-6802
• https://github.com/pypiserver/pypiserver/issues/237
• https://github.com/pypiserver/pypiserver/commit/1375a67c55a9b8d4619df30d2a1c0b239d7357e6
• https://github.com/pypa/advisory-database/tree/main/vulns/pypiserver/PYSEC-2019-113.yaml
• https://github.com/pypiserver/pypiserver

CVE-2019-6802 · published 2019-01-30T20:56:26Z · modified 2024-10-15T16:27:23.942956Z · JSON