CVE-2024-45793
2 advisories.
PyPI/confidant CVE-2024-45793: medium 4.8
Prevent XSS from Confidant API call
Action: Upgrade confidant to 6.6.2 or later.
pip install confidant==6.6.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.6.2 | - |
Fixed versions
| 6.6.2 |
Sources
- osv: GHSA-rxq8-q85f-m866
- https://github.com/lyft/confidant/security/advisories/GHSA-rxq8-q85f-m866
- https://nvd.nist.gov/vuln/detail/CVE-2024-45793
- https://github.com/lyft/confidant/commit/8876b07abde0c8d2a4974f79b60562b6d0193db9
- https://hackerone.com/reports/2332004
- https://hackerone.com/reports/2456673
- https://hackerone.com/reports/2476542
- https://github.com/lyft/confidant
CVE-2024-45793 · published · modified · JSON
PyPI/confidant CVE-2024-45793: medium 4.8
Prevent XSS from Confidant API call
Action: Upgrade confidant to 6.6.2 or later.
pip install confidant==6.6.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.6.2 | - |
Fixed versions
| 6.6.2 |
Sources
- osv: PYSEC-2026-1269
- https://github.com/lyft/confidant/security/advisories/GHSA-rxq8-q85f-m866
- https://nvd.nist.gov/vuln/detail/CVE-2024-45793
- https://github.com/lyft/confidant/commit/8876b07abde0c8d2a4974f79b60562b6d0193db9
- https://hackerone.com/reports/2332004
- https://hackerone.com/reports/2456673
- https://hackerone.com/reports/2476542
- https://github.com/lyft/confidant
- https://pypi.org/project/confidant
- https://github.com/advisories/GHSA-rxq8-q85f-m866
CVE-2024-45793 · published · modified · JSON