PyPI/rucio-webui: high

Authentication Bypass Using an Alternate Path or Channel and Authentication Bypass by Primary Weakness in rucio-webui

Action: Upgrade rucio-webui to 1.26.7 or later.

pip install rucio-webui==1.26.7

Affected

Fixed versions

Sources

• osv: GHSA-v988-828w-xvf2
• https://github.com/rucio/rucio/security/advisories/GHSA-v988-828w-xvf2
• https://github.com/rucio/rucio/issues/4810
• https://github.com/rucio/rucio/issues/4928
• https://github.com/rucio/rucio/commit/8f832404ae88d6300e17d7e706b40fe58e0df90c
• https://github.com/rucio/rucio
• https://github.com/rucio/rucio/releases/tag/1.26.7

published 2021-10-22T16:21:07Z · modified 2025-02-13T05:31:28.532416Z · JSON