PyPI/sickrage CVE-2018-9160: unknown, EPSS 75.60%

SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.

Action: Upgrade sickrage to 9.3.2 or later.

pip install sickrage==9.3.2

Affected

Fixed versions

Sources

• osv: PYSEC-2018-101
• https://github.com/SickRage/SickRage/commit/8156a74a68aea930d1e1047baba8b115c3abfc44
• https://github.com/SickRage/sickrage.github.io/blob/master/sickrage-news/CHANGES.md
• https://www.exploit-db.com/exploits/44545/
• https://github.com/advisories/GHSA-jrcv-3c5h-rh3q

CVE-2018-9160 · published 2018-03-31T21:29:00Z · modified 2026-06-10T17:04:29.891306478Z · JSON