PyPI/opencanary CVE-2024-48911: high 7.8, EPSS 0.22%
OpenCanary Executes Commands From Potentially Writable Config File
Action: Upgrade opencanary to 0.9.5 or later.
pip install opencanary==0.9.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.5 | - |
Fixed versions
| 0.9.5 |
Sources
- osv: GHSA-pf5v-pqfv-x8jj
- https://github.com/thinkst/opencanary/security/advisories/GHSA-pf5v-pqfv-x8jj
- https://nvd.nist.gov/vuln/detail/CVE-2024-48911
- https://github.com/thinkst/opencanary/commit/2c11575b1a3dd8b0df26a879ba856c0aa350c049
- https://github.com/pypa/advisory-database/tree/main/vulns/opencanary/PYSEC-2024-248.yaml
- https://github.com/thinkst/opencanary
- https://github.com/thinkst/opencanary/releases/tag/v0.9.4
CVE-2024-48911 · published · modified · JSON