PyPI/django-navbar-client CVE-2022-32996: unknown, EPSS 2.00%
The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user informat
Action: Upgrade django-navbar-client to 1.0.2 or later.
pip install django-navbar-client==1.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.9.50 | 1.0.2 | - |
Fixed versions
| 1.0.2 |
Sources
- osv: PYSEC-2022-218
- http://pypi.doubanio.com/simple/request
- https://pypi.org/project/django-navbar-client/
- https://github.com/josubg/django_navbar_client/issues/1
CVE-2022-32996 · published · modified · JSON