PyPI/scalyr-agent-2 CVE-2020-24714: critical 9.8, EPSS 0.96%

Scalyr Agent Missing SSL Certificate Validation

Action: Upgrade scalyr-agent-2 to 2.1.10 or later.

pip install scalyr-agent-2==2.1.10

Affected

Fixed versions

Sources

• osv: GHSA-w6xv-mf6f-r5f6
• https://nvd.nist.gov/vuln/detail/CVE-2020-24714
• https://github.com/scalyr/scalyr-agent-2/commit/96d5f5bec734c7a0e7c64654cdb7aacc81fdc867
• https://github.com/pypa/advisory-database/tree/main/vulns/scalyr-agent-2/PYSEC-2020-251.yaml
• https://github.com/scalyr/scalyr-agent-2
• https://github.com/scalyr/scalyr-agent-2/blob/96d5f5bec734c7a0e7c64654cdb7aacc81fdc867/CHANGELOG.md
• https://scalyr-static.s3.amazonaws.com/technical-details/index.html

CVE-2020-24714 · published 2022-05-24T17:26:55Z · modified 2024-10-22T18:03:24.857543Z · JSON