PyPI/potato-annotation: medium 5.1
`potato-annotation` has a Project-Boundary Bypass
Action: Upgrade potato-annotation to 2.4.5 or later.
pip install potato-annotation==2.4.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.4.5 | - |
Fixed versions
| 2.4.5 |
Sources
- osv: GHSA-q9m2-fhv9-3jcf
- https://github.com/davidjurgens/potato/security/advisories/GHSA-q9m2-fhv9-3jcf
- https://github.com/davidjurgens/potato
published · modified · JSON