PyPI/rdiffweb CVE-2022-3274: unknown, EPSS 0.50%

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.

Action: Upgrade rdiffweb to 2.4.7 or later.

pip install rdiffweb==2.4.7

Affected

Fixed versions

Sources

• osv: PYSEC-2022-289
• https://github.com/ikus060/rdiffweb/commit/e974df75bdbcff3996ad70bd1b4424ec1485ea3f
• https://huntr.dev/bounties/8834c356-4ddb-4be7-898b-d76f480e9c3f
• https://github.com/advisories/GHSA-gmj8-84r4-h46j

CVE-2022-3274 · published 2022-09-22T19:15:00Z · modified 2026-06-10T17:02:33.128257551Z · JSON