PyPI/rdiffweb CVE-2022-3298: unknown, EPSS 1.16%

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.

Action: Upgrade rdiffweb to 2.4.8 or later.

pip install rdiffweb==2.4.8

Affected

Fixed versions

Sources

• osv: PYSEC-2022-294
• https://huntr.dev/bounties/f9fedf94-41c9-49c4-8552-e407123a44e7
• https://github.com/ikus060/rdiffweb/commit/626cca1b75b6c587afd4241a9692e8929b1921a5
• https://github.com/advisories/GHSA-xhw9-4wqq-x67v

CVE-2022-3298 · published 2022-09-26T22:15:00Z · modified 2026-06-10T17:02:33.478579504Z · JSON