CVE-2016-3954
2 advisories.
PyPI/web2py CVE-2016-3954: medium 5.5
web2py exposure of sensitive information
Action: Upgrade web2py to 2.14.2 or later.
pip install web2py==2.14.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.14.2 | - |
Fixed versions
| 2.14.2 |
Sources
- osv: GHSA-jr83-vr4j-mp6p
- https://nvd.nist.gov/vuln/detail/CVE-2016-3954
- https://github.com/web2py/web2py/commit/0820926b500a321060ef6a76ce89fd35a252f8b0
- https://devco.re/blog/2017/01/03/web2py-unserialize-code-execution-CVE-2016-3957
- https://github.com/web2py/web2py
- https://usn.ubuntu.com/4030-1
CVE-2016-3954 · published · modified · JSON
PyPI/web2py CVE-2016-3954: medium 5.5
web2py exposure of sensitive information
Action: Upgrade web2py to 2.14.2 or later.
pip install web2py==2.14.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.14.2 | - |
Fixed versions
| 2.14.2 |
Sources
- osv: PYSEC-2026-1062
- https://nvd.nist.gov/vuln/detail/CVE-2016-3954
- https://github.com/web2py/web2py/commit/0820926b500a321060ef6a76ce89fd35a252f8b0
- https://devco.re/blog/2017/01/03/web2py-unserialize-code-execution-CVE-2016-3957
- https://github.com/web2py/web2py
- https://usn.ubuntu.com/4030-1
- https://pypi.org/project/web2py
- https://github.com/advisories/GHSA-jr83-vr4j-mp6p
CVE-2016-3954 · published · modified · JSON