CVE-2024-37301
2 advisories.
PyPI/document-merge-service CVE-2024-37301: high 7.2
document-merge-service vulnerable to Remote Code Execution via Server-Side Template Injection
Action: Upgrade document-merge-service to 6.5.2 or later.
pip install document-merge-service==6.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.5.2 | - |
Fixed versions
| 6.5.2 |
Sources
- osv: GHSA-v5gf-r78h-55q6
- https://github.com/adfinis/document-merge-service/security/advisories/GHSA-v5gf-r78h-55q6
- https://nvd.nist.gov/vuln/detail/CVE-2024-37301
- https://github.com/adfinis/document-merge-service/commit/a1edd39d33d1bdf75c31ea01c317547be90ca074
- https://github.com/adfinis/document-merge-service
CVE-2024-37301 · published · modified · JSON
PyPI/document-merge-service CVE-2024-37301: high 7.2
document-merge-service vulnerable to Remote Code Execution via Server-Side Template Injection
Action: Upgrade document-merge-service to 6.5.2 or later.
pip install document-merge-service==6.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.5.2 | - |
Fixed versions
| 6.5.2 |
Sources
- osv: PYSEC-2026-1314
- https://github.com/adfinis/document-merge-service/security/advisories/GHSA-v5gf-r78h-55q6
- https://nvd.nist.gov/vuln/detail/CVE-2024-37301
- https://github.com/adfinis/document-merge-service/commit/a1edd39d33d1bdf75c31ea01c317547be90ca074
- https://github.com/adfinis/document-merge-service
- https://pypi.org/project/document-merge-service
- https://github.com/advisories/GHSA-v5gf-r78h-55q6
CVE-2024-37301 · published · modified · JSON