CVE-2020-7694
2 advisories.
PyPI/uvicorn CVE-2020-7694: high 7.5
Log injection in uvicorn
Action: Upgrade uvicorn to 0.11.7 or later.
pip install uvicorn==0.11.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.11.7 | - |
Fixed versions
| 0.11.7 |
Sources
- osv: GHSA-33c7-2mpw-hg34
- https://nvd.nist.gov/vuln/detail/CVE-2020-7694
- https://github.com/encode/uvicorn/issues/723
- https://github.com/encode/uvicorn/commit/895807f94ea9a8e588605c12076b7d7517cda503
- https://github.com/encode/uvicorn
- https://github.com/pypa/advisory-database/tree/main/vulns/uvicorn/PYSEC-2020-150.yaml
- https://snyk.io/vuln/SNYK-PYTHON-UVICORN-575560
CVE-2020-7694 · published · modified · JSON
PyPI/uvicorn CVE-2020-7694: unknown
This affects all versions of package uvicorn. The request logger provided by the package is vulnerable to ASNI escape sequence injection. Whenever any HTTP request is received, the default behaviour o
Action: Upgrade uvicorn to 0.11.7 or later.
pip install uvicorn==0.11.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.11.7 | - |
Fixed versions
| 0.11.7 |
Sources
- osv: PYSEC-2020-150
- https://snyk.io/vuln/SNYK-PYTHON-UVICORN-575560
- https://github.com/encode/uvicorn
- https://github.com/advisories/GHSA-33c7-2mpw-hg34
CVE-2020-7694 · published · modified · JSON