CVE-2022-3439
2 advisories.
PyPI/rdiffweb CVE-2022-3439: critical 9.8
Missing rate limit on rdiffweb
Action: Upgrade rdiffweb to 2.5.0 or later.
pip install rdiffweb==2.5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5.0 | - |
Fixed versions
| 2.5.0 |
Sources
- osv: GHSA-x8x2-wc2h-wc48
- https://nvd.nist.gov/vuln/detail/CVE-2022-3439
- https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311
- https://github.com/ikus060/rdiffweb
- https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43159.yaml
- https://huntr.dev/bounties/37b86c45-b240-4626-bd53-b6f02d10e0d7
CVE-2022-3439 · published · modified · JSON
PyPI/rdiffweb CVE-2022-3439: critical 9.8
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.
Action: Upgrade rdiffweb to 2.5.0 or later.
pip install rdiffweb==2.5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5.0 | - |
Fixed versions
| 2.5.0 |
Sources
- osv: PYSEC-2022-43159
- https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311
- https://huntr.dev/bounties/37b86c45-b240-4626-bd53-b6f02d10e0d7
- https://github.com/advisories/GHSA-x8x2-wc2h-wc48
CVE-2022-3439 · published · modified · JSON