PyPI/rdiffweb CVE-2023-4138: medium 4.2, EPSS 0.45%

RDiffWeb vulnerable to Allocation of Resources Without Limits or Throttling

Action: Upgrade rdiffweb to 2.8.1 or later.

pip install rdiffweb==2.8.1

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1863
• https://nvd.nist.gov/vuln/detail/CVE-2023-4138
• https://github.com/ikus060/rdiffweb/commit/feef0d7b11d86aed29bf98c21526088117964d85
• https://github.com/ikus060/rdiffweb
• https://huntr.dev/bounties/1b1fa915-d588-4bb1-9e82-6a6be79befed
• https://pypi.org/project/rdiffweb
• https://github.com/advisories/GHSA-wwrg-2w5j-grvx

CVE-2023-4138 · published 2026-07-07T11:45:21.664521Z · modified 2026-07-07T17:47:00.404114890Z · JSON