CVE-2021-40720
2 advisories.
PyPI/ops-cli CVE-2021-40720: critical 9.8
Ops CLI Deserialization of Untrusted Data vulnerability
Action: Upgrade ops-cli to 2.0.5 or later.
pip install ops-cli==2.0.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.5 | - |
Fixed versions
| 2.0.5 |
Sources
- osv: GHSA-x23q-4j9j-9cxw
- https://nvd.nist.gov/vuln/detail/CVE-2021-40720
- https://github.com/adobe/ops-cli
- https://github.com/pypa/advisory-database/tree/main/vulns/ops-cli/PYSEC-2021-380.yaml
- https://helpx.adobe.com/security/products/ops_cli/apsb21-88.html
CVE-2021-40720 · published · modified · JSON
PyPI/ops-cli CVE-2021-40720: unknown
Ops CLI version 2.0.4 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkout_repo function is called on a maliciously craf
Action: Upgrade ops-cli to 2.0.5 or later.
pip install ops-cli==2.0.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.5 | - |
Fixed versions
| 2.0.5 |
Sources
- osv: PYSEC-2021-380
- https://helpx.adobe.com/security/products/ops_cli/apsb21-88.html
- https://github.com/advisories/GHSA-x23q-4j9j-9cxw
CVE-2021-40720 · published · modified · JSON