tocsin

Debian/pypy3: medium 6.5

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression De

Action: Upgrade pypy3 to 7.3.5+dfsg-2 or later.

Affected

introducedfixedlast affected
07.3.5+dfsg-2-

Fixed versions

7.3.5+dfsg-2

Sources

published · modified · JSON