PyPI/autobahn CVE-2020-35678: unknown, EPSS 1.44%

Autobahn|Python before 20.12.3 allows redirect header injection.

Action: Upgrade autobahn to 20.12.3 or later.

pip install autobahn==20.12.3

Affected

Fixed versions

Sources

• osv: PYSEC-2020-25
• https://github.com/crossbario/autobahn-python/compare/v20.12.2...v20.12.3
• https://github.com/crossbario/autobahn-python
• https://github.com/crossbario/autobahn-python/pull/1439
• https://pypi.org/project/autobahn/20.12.3/
• https://autobahn.readthedocs.io/en/latest/changelog.html
• https://github.com/advisories/GHSA-gwp7-vqr5-h33h

CVE-2020-35678 · published 2020-12-27T00:15:00Z · modified 2023-11-08T04:03:35.306822Z · JSON