PyPI/roundup CVE-2009-2737: unknown, EPSS 2.34%
Roundup Improper Access Control
Action: Upgrade roundup to 1.2.1 or later.
pip install roundup==1.2.1pip install roundup==1.4.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.2 | 1.2.1 | - |
| 1.4 | 1.4.7 | - |
Fixed versions
| 1.2.1 | 1.4.7 |
Sources
- osv: PYSEC-2026-744
- https://nvd.nist.gov/vuln/detail/CVE-2009-2737
- https://bugzilla.redhat.com/show_bug.cgi?id=489355
- https://github.com/roundup-tracker/roundup/blob/d24abceaa19072b28e5c8ae0db4dd341597d14fc/CHANGES.txt#L2356
- https://sourceforge.net/p/roundup/code/ci/4081
- https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00429.html
- https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00439.html
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=518768
- http://issues.roundup-tracker.org/issue2550521
- http://secunia.com/advisories/34192
- http://www.debian.org/security/2009/dsa-1754
- http://www.osvdb.org/56368
- http://www.securityfocus.com/bid/34059
- https://pypi.org/project/roundup
- https://github.com/advisories/GHSA-9rj9-5wcv-xgf2
CVE-2009-2737 · published · modified · JSON