PYSEC-2020-44

2020-07-2913:15:00

Google

osv.dev

0.002 Low

EPSS

Percentile

60.1%

JSON

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized.

CPENameOperatorVersion
gerapyeq0.7.2
gerapyeq0.7.8
gerapyeq0.8.0
gerapyeq0.9.1
gerapyeq0.9.2a0
gerapyeq0.8.5rc2
gerapyeq0.8.6
gerapyeq0.6.7
gerapyeq0.9.3a1
gerapyeq0.8.6rc2

Name	Operator	Version
gerapy	eq	0.7.2
gerapy	eq	0.7.8
gerapy	eq	0.8.0
gerapy	eq	0.9.1
gerapy	eq	0.9.2a0
gerapy	eq	0.8.5rc2
gerapy	eq	0.8.6
gerapy	eq	0.6.7
gerapy	eq	0.9.3a1
gerapy	eq	0.8.6rc2

Rows per page:

1-10 of 351

References

github.com/advisories/GHSA-g57j-q48p-9vm2

github.com/Gerapy/Gerapy/commit/e8446605eb2424717418eae199ec7aad573da2d2

snyk.io/vuln/SNYK-PYTHON-GERAPY-572470

0.002 Low

EPSS

Percentile

60.1%

JSON

Related for OSV:PYSEC-2020-44