PyPI/mangadex-downloader CVE-2022-36082: medium 5.3, EPSS 0.70%
mangadex-downloader vulnerable to unauthorized file reading
Action: Upgrade mangadex-downloader to 1.7.2 or later.
pip install mangadex-downloader==1.7.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.3.0 | 1.7.2 | - |
Fixed versions
| 1.7.2 |
Sources
- osv: GHSA-r9x7-2xmr-v8fw
- https://github.com/mansuf/mangadex-downloader/security/advisories/GHSA-r9x7-2xmr-v8fw
- https://nvd.nist.gov/vuln/detail/CVE-2022-36082
- https://github.com/mansuf/mangadex-downloader/commit/439cc2825198ebc12b3310c95c39a8c7710c9b42
- https://github.com/mansuf/mangadex-downloader
- https://github.com/pypa/advisory-database/tree/main/vulns/mangadex-downloader/PYSEC-2022-264.yaml
CVE-2022-36082 · published · modified · JSON