PyPI/trac CVE-2006-3695: critical 9.4, EPSS 1.90%

Trac reStructuredText breach of privacy and denial of service vulnerability

Action: Upgrade trac to 0.9.6 or later.

pip install trac==0.9.6

Affected

Fixed versions

Sources

• osv: GHSA-r524-c2gf-5chr
• https://nvd.nist.gov/vuln/detail/CVE-2006-3695
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27706
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27708
• https://github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2006-2.yaml
• https://web.archive.org/web/20061227230548/http://trac.edgewall.org/wiki/ChangeLog
• https://web.archive.org/web/20140804165436/http://secunia.com/advisories/21534
• https://web.archive.org/web/20140806223337/http://secunia.com/advisories/20958
• https://web.archive.org/web/20200228034827/http://www.securityfocus.com/bid/18323
• http://trac.edgewall.org/wiki/ChangeLog
• http://www.debian.org/security/2006/dsa-1152

CVE-2006-3695 · published 2022-05-01T07:11:38Z · modified 2024-11-18T20:58:27.119957Z · JSON