PyPI/treq CVE-2022-23607: unknown, EPSS 1.08%
treq is an HTTP library inspired by requests but written on top of Twisted's Agents. Treq's request methods (`treq.get`, `treq.post`, etc.) and `treq.client.HTTPClient` constructor accept cookies as a
Action: Upgrade treq to 22.1.0 or later.
pip install treq==22.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 21.1.0 | 22.1.0 | - |
Fixed versions
| 22.1.0 |
Sources
CVE-2022-23607 · published · modified · JSON