PyPI/rdiffweb CVE-2022-3457: critical 9.8, EPSS 0.44%

Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5.

Action: Upgrade rdiffweb to 2.5.0 or later.

pip install rdiffweb==2.5.0

Affected

Fixed versions

Sources

• osv: PYSEC-2022-43161
• https://github.com/ikus060/rdiffweb/commit/afc1bdfab5161c74012ff2590a6ec49cc0d8fde0
• https://huntr.dev/bounties/cfcab02e-d6ad-4dcf-b1b0-da90434bc55b
• https://github.com/advisories/GHSA-824x-jcxf-hpfg

CVE-2022-3457 · published 2022-10-13T20:15:00Z · modified 2026-06-10T17:02:35.932182257Z · JSON