GHSA-52qp-jpq7-6c54

Suggest an improvement
Source
https://github.com/advisories/GHSA-52qp-jpq7-6c54
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/04/GHSA-52qp-jpq7-6c54/GHSA-52qp-jpq7-6c54.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-52qp-jpq7-6c54
Aliases
Published
2021-04-29T21:52:30Z
Modified
2026-07-08T06:27:55Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Insecure Deserialization of untrusted data in rmccue/requests
Details

Impact

Unserialization of untrusted data.

Patches

The issue has been patched and users of Requests 1.6.0, 1.6.1 and 1.7.0 should update to version 1.8.0.

References

Publications about the vulnerability:

Originally fixed in WordPress 5.5.2:

Related Security Advisories:

Notification to the Requests repo including a fix in:

For more information

If you have any questions or comments about this advisory:

Database specific 
{
    "cwe_ids":  [
        "CWE-502"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2021-04-27T20:54:56Z",
    "nvd_published_at":  "2021-04-27T21:15:00Z",
    "severity":  "CRITICAL"
}
References

Affected packages

Packagist / rmccue/requests

Package

Name
rmccue/requests
Purl
pkg:composer/rmccue/requests

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.0
Fixed
1.8.0

Affected versions

v1.*
v1.6.0
v1.6.1
v1.7.0

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/04/GHSA-52qp-jpq7-6c54/GHSA-52qp-jpq7-6c54.json"