PyPI/b2sdk CVE-2022-23651: unknown, EPSS 0.22%
b2-sdk-python is a python library to access cloud storage provided by backblaze. Linux and Mac releases of the SDK version 1.14.0 and below contain a key disclosure vulnerability that, in certain cond
Action: Upgrade b2sdk to 1.14.1 or later.
pip install b2sdk==1.14.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.14.1 | - |
Fixed versions
| 1.14.1 |
Sources
- osv: PYSEC-2022-33
- https://github.com/Backblaze/b2-sdk-python/commit/62476638986e5b6d7459aca5ef8ce220760226e0
- https://pypi.org/project/b2sdk/
- https://github.com/Backblaze/b2-sdk-python/security/advisories/GHSA-p867-fxfr-ph2w
CVE-2022-23651 · published · modified · JSON