PyPI/b2sdk CVE-2022-23651: medium 4.7, EPSS 0.22%

b2-sdk-python TOCTOU application key disclosure

Action: Upgrade b2sdk to 1.14.1 or later.

pip install b2sdk==1.14.1

Affected

Fixed versions

Sources

• osv: GHSA-p867-fxfr-ph2w
• https://github.com/Backblaze/b2-sdk-python/security/advisories/GHSA-p867-fxfr-ph2w
• https://nvd.nist.gov/vuln/detail/CVE-2022-23651
• https://github.com/Backblaze/b2-sdk-python/commit/62476638986e5b6d7459aca5ef8ce220760226e0
• https://github.com/Backblaze/b2-sdk-python
• https://github.com/pypa/advisory-database/tree/main/vulns/b2sdk/PYSEC-2022-33.yaml
• https://pypi.org/project/b2sdk

CVE-2022-23651 · published 2022-02-24T12:08:24Z · modified 2024-09-04T21:01:50.239481Z · JSON