PyPI/gratient: high 7.5
gratient 0.5 contains credential harvesting code
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-xm4r-5rj9-2pg3
- https://github.com/pypa/advisory-database/tree/main/vulns/gratient/PYSEC-2024-1.yaml
- https://inspector.pypi.io/project/gratient/0.5/packages/c5/c5/353e45fa57fa5f1b2b42fa24a029cdfb018d7263850fb43b6d6352157734/gratient-0.5-py3-none-any.whl/gratient/__init__.py#line.4
- https://pypi.org/project/gratient
published · modified · JSON