PyPI/rdiffweb CVE-2022-4721: unknown, EPSS 0.52%

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.

Action: Upgrade rdiffweb to 2.5.5 or later.

pip install rdiffweb==2.5.5

Affected

Fixed versions

Sources

• osv: PYSEC-2022-43007
• https://huntr.dev/bounties/3c48ef5d-da4d-4ee4-aaca-af65e7273720
• https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d
• https://github.com/advisories/GHSA-83pm-7v48-5jp4

CVE-2022-4721 · published 2022-12-27T15:15:00Z · modified 2026-06-10T17:02:34.431227697Z · JSON