PyPI/mobsfscan CVE-2024-29190: high 7.3, EPSS 0.72%

SSRF Vulnerability on assetlinks_check(act_name, well_knowns)

Action: Upgrade mobsfscan to 0.3.8 or later.

pip install mobsfscan==0.3.8

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1677
• https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-wfgj-wrgh-h3r3
• https://nvd.nist.gov/vuln/detail/CVE-2024-29190
• https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/5a8eeee73c5f504a6c3abdf2a139a13804efdb77
• https://github.com/MobSF/mobsfscan/commit/61fd40b477bbf9d204eb8c5a83a86c396d839798
• https://github.com/MobSF/mobsfscan/commit/cd01b71770a6e56c1c71b0e5f454e7b6c9c64ef4
• https://drive.google.com/file/d/1nbKMd2sKosbJef5Mh4DxjcHcQ8Hw0BNR/view?usp=share_link
• https://github.com/MobSF/Mobile-Security-Framework-MobSF
• https://github.com/pypa/advisory-database/tree/main/vulns/mobsf/PYSEC-2024-257.yaml
• https://pypi.org/project/mobsfscan
• https://github.com/advisories/GHSA-wfgj-wrgh-h3r3

CVE-2024-29190 · published 2026-07-07T11:45:36.233070Z · modified 2026-07-07T17:57:13.268082861Z · JSON