PyPI/rdiffweb CVE-2022-3179: unknown, EPSS 0.98%

Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2.

Action: Upgrade rdiffweb to 2.4.2 or later.

pip install rdiffweb==2.4.2

Affected

Fixed versions

Sources

• osv: PYSEC-2022-272
• https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5
• https://huntr.dev/bounties/58eae29e-3619-449d-9bba-fdcbabcba5fe
• https://github.com/advisories/GHSA-mp5p-g2jv-r8qw

CVE-2022-3179 · published 2022-09-13T17:15:00Z · modified 2023-11-08T04:09:33.069051Z · JSON