CVE-2025-67796
2 advisories.
PyPI/rdiffweb CVE-2025-67796: high 8.1
IKUS Rdiffweb allows an attacker with any valid or stolen access token to act as other users
Action: Upgrade rdiffweb to 2.10.6 or later.
pip install rdiffweb==2.10.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.10.6 | - |
Fixed versions
| 2.10.6 |
Sources
- osv: GHSA-v4gp-hf5j-4566
- https://nvd.nist.gov/vuln/detail/CVE-2025-67796
- https://gitlab.com/ikus-soft/rdiffweb
- https://gitlab.com/ikus-soft/rdiffweb#2106-2025-10-02
CVE-2025-67796 · published · modified · JSON
PyPI/rdiffweb CVE-2025-67796: high 8.1
IKUS Rdiffweb allows an attacker with any valid or stolen access token to act as other users
Action: Upgrade rdiffweb to 2.10.6 or later.
pip install rdiffweb==2.10.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.10.6 | - |
Fixed versions
| 2.10.6 |
Sources
- osv: PYSEC-2026-3048
- https://nvd.nist.gov/vuln/detail/CVE-2025-67796
- https://gitlab.com/ikus-soft/rdiffweb
- https://gitlab.com/ikus-soft/rdiffweb#2106-2025-10-02
- https://pypi.org/project/rdiffweb
- https://github.com/advisories/GHSA-v4gp-hf5j-4566
CVE-2025-67796 · published · modified · JSON