PYSEC-2020-44

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/gerapy/PYSEC-2020-44.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2020-44
Aliases
Published
2020-07-29T13:15:00Z
Modified
2023-11-08T04:04:05.500610Z
Summary
[none]
Details

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized.

References

Affected packages

PyPI / gerapy

Package

Name
gerapy
View open source insights on deps.dev
Purl
pkg:pypi/gerapy

Affected ranges

Type
GIT
Repo
https://github.com/Gerapy/Gerapy
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
e8446605eb2424717418eae199ec7aad573da2d2
Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.9.3

Affected versions

0.*
0.6.6
0.6.7
0.6.8
0.6.9
0.7.0
0.7.1
0.7.2
0.7.3
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
0.8.2
0.8.3
0.8.4rc2
0.8.5rc2
0.8.5
0.8.6a0
0.8.6b0
0.8.6b1
0.8.6rc1
0.8.6rc2
0.8.6
0.8.7
0.8.8
0.9.0
0.9.1
0.9.2a0
0.9.2rc1
0.9.2
0.9.3a1
0.9.3a2
0.9.3b1

Database specific

source 
"https://github.com/pypa/advisory-database/blob/main/vulns/gerapy/PYSEC-2020-44.yaml"