PyPI/rdiffweb CVE-2022-3438: medium 6.1, EPSS 0.68%

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

Action: Upgrade rdiffweb to 2.5.0 or later.

pip install rdiffweb==2.5.0

Affected

Fixed versions

Sources

• osv: PYSEC-2022-43158
• https://huntr.dev/bounties/bc5689e4-221a-4200-a8ab-42c659f89f67
• https://github.com/ikus060/rdiffweb/commit/4d464b467f14b8eb9103d7f5f0774e49995527c7
• https://github.com/advisories/GHSA-8g9m-vv69-7j99

CVE-2022-3438 · published 2022-10-10T12:15:00Z · modified 2026-06-10T17:02:34.596576795Z · JSON