PyPI/rdiffweb CVE-2022-4018: unknown, EPSS 0.89%

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.

Action: Upgrade rdiffweb to 2.4.11a1 or later.

pip install rdiffweb==2.4.11a1

Affected

Fixed versions

Sources

• osv: PYSEC-2022-43001
• https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095
• https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5
• https://github.com/advisories/GHSA-4wph-9vrm-6v3w

CVE-2022-4018 · published 2022-11-16T13:15:00Z · modified 2026-06-10T17:02:34.066819367Z · JSON