PyPI/planet CVE-2023-32303: unknown, EPSS 0.25%
Planet is software that provides satellite data. The secret file stores the user's Planet API authentication information. It should only be accessible by the user, but before version 2.0.1, its permis
Action: Upgrade planet to 2.0.1 or later.
pip install planet==2.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.1 | - |
Fixed versions
| 2.0.1 |
Sources
- osv: PYSEC-2023-71
- https://github.com/planetlabs/planet-client-python/commit/d71415a83119c5e89d7b80d5f940d162376ee3b7
- https://github.com/planetlabs/planet-client-python/security/advisories/GHSA-j5fj-rfh6-qj85
- https://github.com/planetlabs/planet-client-python/releases/tag/2.0.1
CVE-2023-32303 · published · modified · JSON