PyPI/wsgidav CVE-2026-55509: high, EPSS 0.51%
WsgiDAV MySQL provider has a blind SQL injection
Action: Upgrade wsgidav to 4.3.5 or later.
pip install wsgidav==4.3.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.5 | - |
Fixed versions
| 4.3.5 |
Sources
- osv: GHSA-p6gw-4frg-j7jw
- https://github.com/mar10/wsgidav/security/advisories/GHSA-p6gw-4frg-j7jw
- https://github.com/mar10/wsgidav/commit/6f35776c9188f130ab044ce557015d51aaa83500
- https://github.com/mar10/wsgidav
- https://github.com/mar10/wsgidav/blob/master/CHANGELOG.md#435--2026-06-27
- https://github.com/mar10/wsgidav/releases/tag/v4.3.5
CVE-2026-55509 · published · modified · JSON