PyPI/git-big-picture CVE-2021-3028: critical 9.8, EPSS 2.94%

git-big-picture Code Execution

Action: Upgrade git-big-picture to 1.0.0 or later.

pip install git-big-picture==1.0.0

Affected

Fixed versions

Sources

• osv: GHSA-x38j-4rr5-hqrj
• https://nvd.nist.gov/vuln/detail/CVE-2021-3028
• https://github.com/git-big-picture/git-big-picture/pull/27
• https://github.com/git-big-picture/git-big-picture/pull/62
• https://github.com/git-big-picture/git-big-picture
• https://github.com/git-big-picture/git-big-picture/releases/tag/v1.0.0
• https://github.com/pypa/advisory-database/tree/main/vulns/git-big-picture/PYSEC-2021-15.yaml

CVE-2021-3028 · published 2022-05-24T17:39:13Z · modified 2024-09-20T18:22:28.333060Z · JSON