CVE-2022-23651
2 advisories.
PyPI/b2sdk CVE-2022-23651: medium 4.7, EPSS 0.22%
b2-sdk-python TOCTOU application key disclosure
Action: Upgrade b2sdk to 1.14.1 or later.
pip install b2sdk==1.14.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.14.1 | - |
Fixed versions
| 1.14.1 |
Sources
- osv: GHSA-p867-fxfr-ph2w
- https://github.com/Backblaze/b2-sdk-python/security/advisories/GHSA-p867-fxfr-ph2w
- https://nvd.nist.gov/vuln/detail/CVE-2022-23651
- https://github.com/Backblaze/b2-sdk-python/commit/62476638986e5b6d7459aca5ef8ce220760226e0
- https://github.com/Backblaze/b2-sdk-python
- https://github.com/pypa/advisory-database/tree/main/vulns/b2sdk/PYSEC-2022-33.yaml
- https://pypi.org/project/b2sdk
CVE-2022-23651 · published · modified · JSON
PyPI/b2sdk CVE-2022-23651: unknown, EPSS 0.22%
b2-sdk-python is a python library to access cloud storage provided by backblaze. Linux and Mac releases of the SDK version 1.14.0 and below contain a key disclosure vulnerability that, in certain cond
Action: Upgrade b2sdk to 1.14.1 or later.
pip install b2sdk==1.14.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.14.1 | - |
Fixed versions
| 1.14.1 |
Sources
- osv: PYSEC-2022-33
- https://github.com/Backblaze/b2-sdk-python/commit/62476638986e5b6d7459aca5ef8ce220760226e0
- https://pypi.org/project/b2sdk/
- https://github.com/Backblaze/b2-sdk-python/security/advisories/GHSA-p867-fxfr-ph2w
CVE-2022-23651 · published · modified · JSON