PyPI/rdiffweb CVE-2022-4646: unknown, EPSS 0.34%

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.

Action: Upgrade rdiffweb to 2.5.4 or later.

pip install rdiffweb==2.5.4

Affected

Fixed versions

Sources

• osv: PYSEC-2022-43004
• https://huntr.dev/bounties/17bc1b0f-1f5c-432f-88e4-c9866ccf6e10
• https://github.com/ikus060/rdiffweb/commit/e6f0d8002129be90fe82fa3e3ea0a6942caba398
• https://github.com/advisories/GHSA-85fp-523q-5xwc

CVE-2022-4646 · published 2022-12-22T02:15:00Z · modified 2026-06-10T17:02:34.344013411Z · JSON