PyPI/rdiffweb CVE-2022-3273: critical 9.8, EPSS 0.57%

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

Action: Upgrade rdiffweb to 2.4.11a1 or later.

pip install rdiffweb==2.4.11a1

Affected

Fixed versions

Sources

• osv: PYSEC-2022-43156
• https://github.com/ikus060/rdiffweb/commit/b5e3bb0a98268d18ceead36ab9b2b7eaacd659a8
• https://huntr.dev/bounties/a6df4bad-3382-4add-8918-760d885690f6
• https://github.com/advisories/GHSA-9g3v-v24q-jj5p

CVE-2022-3273 · published 2022-10-06T18:16:00Z · modified 2026-06-10T17:00:13.183263361Z · JSON