CVE-2024-1314
2 advisories.
PyPI/kinto-attachment CVE-2024-1314: high 8.6
Kinto Attachment's attachments can be replaced on read-only records
Action: Upgrade kinto-attachment to 6.4.0 or later.
pip install kinto-attachment==6.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.4.0 | - |
Fixed versions
| 6.4.0 |
Sources
- osv: GHSA-hvp4-vrv2-8wrq
- https://github.com/Kinto/kinto-attachment/security/advisories/GHSA-hvp4-vrv2-8wrq
- https://github.com/Kinto/kinto-attachment/commit/f4a31484f5925cbc02b59ebd37554538ab826ca1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1879034
- https://github.com/Kinto/kinto-attachment
CVE-2024-1314 · published · modified · JSON
PyPI/kinto-attachment CVE-2024-1314: high 8.6
Kinto Attachment's attachments can be replaced on read-only records
Action: Upgrade kinto-attachment to 6.4.0 or later.
pip install kinto-attachment==6.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.4.0 | - |
Fixed versions
| 6.4.0 |
Sources
- osv: PYSEC-2026-1494
- https://github.com/Kinto/kinto-attachment/security/advisories/GHSA-hvp4-vrv2-8wrq
- https://github.com/Kinto/kinto-attachment/commit/f4a31484f5925cbc02b59ebd37554538ab826ca1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1879034
- https://github.com/Kinto/kinto-attachment
- https://pypi.org/project/kinto-attachment
- https://github.com/advisories/GHSA-hvp4-vrv2-8wrq
- https://nvd.nist.gov/vuln/detail/CVE-2024-1314
CVE-2024-1314 · published · modified · JSON