Ubuntu: Security Advisory (USN-7476-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2024-1892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Regular Expression Denial of Service ReDoS vulnerability exists in the XMLFeedSpider class of the scrapy/scrapy project, specifically in the parsing of XML...

gerapy (>=0.9.5, <=0.9.6), scrapy-kk-plus (>=0.1.1, <=0.1.4) +5 more potentially affected by CVE-2024-1892 via scrapy (1.8.4)

scrapy PYPI version 1.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on scrapy and may be impacted: - gerapy =0.9.5, =0.1.1, =0.1.0, =0.1.0, =1.1.0, =0.1.10, =0.1.12 Source cves: CVE-2024-1892 Source advisory: OSV:PYSEC-2024-162...

adyanutils (>=0.4.0, <=0.8.6), angeltools (>=0.1.1, <=0.2.3.post5) +46 more potentially affected by CVE-2024-1892 via scrapy (>=2.0.1, <=2.11.0)

scrapy PYPI version =2.0.1, =0.4.0, =0.1.1, =1.1.9, =2.8.3, =1.0.6, =0.0.1, =0.3.0, =0.0.2, =0.3.0a0, =0.7.2, =0.8.2 - elcrawlsdk 1.0.0 - estela-entrypoint 0.2.1 and more Source cves: CVE-2024-1892 Source advisory: OSV:PYSEC-2024-162...

moear-package-mobi (>=1.0.0a1, <=1.1.2.post0), moear-spider-zhihudaily (>=1.0.0a1, <=1.1.1) potentially affected by CVE-2024-1892 via scrapy (1.5.2)

scrapy PYPI version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on scrapy and may be impacted: - moear-package-mobi =1.0.0a1, =1.0.0a1, =1.1.1 Source cves: CVE-2024-1892 Source advisory: OSV:PYSEC-2024-162...

bookscrape (>=0.0.1.dev1, <=0.0.2b7), gerapy (>=0.9.3b1, <=0.9.3) potentially affected by CVE-2024-1892 via scrapy (1.5.0)

scrapy PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on scrapy and may be impacted: - bookscrape =0.0.1.dev1, =0.9.3b1, =0.9.3 Source cves: CVE-2024-1892 Source advisory: OSV:PYSEC-2024-162...

scraper-factory (>=0.1.0, <=0.2.1) potentially affected by CVE-2024-1892 via scrapy (1.7.2)

scrapy PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on scrapy and may be impacted: - scraper-factory =0.1.0, =0.2.1 Source cves: CVE-2024-1892 Source advisory: OSV:PYSEC-2024-162...

CVE-2024-1892 ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider

A Regular Expression Denial of Service ReDoS vulnerability exists in the XMLFeedSpider class of the scrapy/scrapy project, specifically in the parsing of XML content. By crafting malicious XML content that exploits inefficient regular expression complexity used in the parsing process, an attacker...

article-extract (>=0.1.2, <=0.1.3), bookscrape (>=0.0.1.dev1, <=0.0.2b7) +18 more potentially affected by CVE-2024-1892 via scrapy (>=1.3.3, <=1.8.0)

scrapy PYPI version =1.3.3, =0.1.2, =0.0.1.dev1, =1.2.1.20160901, =0.0.5, =0.0.20, =0.9.3b1, =0.0.1, =1.0.0a1, =1.0.0a1, =1.7.2, =1.1.0, =0.1.0, =0.2.3, =0.0.1, =0.1.5, =0.1.8 and more Source cves: CVE-2024-1892 Source advisory: MEND:CVE-2024-1892...

adyanutils (>=0.4.0, <=0.8.6), angeltools (>=0.1.1, <=0.2.3.post5) +46 more potentially affected by CVE-2024-1892 via scrapy (>=2.0.1, <=2.11.0)

scrapy PYPI version =2.0.1, =0.4.0, =0.1.1, =1.1.9, =2.8.3, =1.0.6, =0.0.1, =0.3.0, =0.0.2, =0.3.0a0, =0.7.2, =0.8.2 - elcrawlsdk 1.0.0 - estela-entrypoint 0.2.1 and more Source cves: CVE-2024-1892 Source advisory: MEND:CVE-2024-1892...

CVE-2024-1892 ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider

A Regular Expression Denial of Service ReDoS vulnerability exists in the XMLFeedSpider class of the scrapy/scrapy project, specifically in the parsing of XML content. By crafting malicious XML content that exploits inefficient regular expression complexity used in the parsing process, an attacker...

CVE-2024-1892

A Regular Expression Denial of Service ReDoS vulnerability exists in the XMLFeedSpider class of the scrapy/scrapy project, specifically in the parsing of XML content. By crafting malicious XML content that exploits inefficient regular expression complexity used in the parsing process, an attacker...

CVE-2024-1892 ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider

A Regular Expression Denial of Service ReDoS vulnerability exists in the XMLFeedSpider class of the scrapy/scrapy project, specifically in the parsing of XML content. By crafting malicious XML content that exploits inefficient regular expression complexity used in the parsing process, an attacker...

article-extract (>=0.1.2, <=0.1.3), bookscrape (>=0.0.1.dev1, <=0.0.2b7) +18 more potentially affected by CVE-2024-1892 via scrapy (>=1.3.3, <=1.8.0)

scrapy PYPI version =1.3.3, =0.1.2, =0.0.1.dev1, =1.2.1.20160901, =0.0.5, =0.0.20, =0.9.3b1, =0.0.1, =1.0.0a1, =1.0.0a1, =1.7.2, =1.1.0, =0.1.0, =0.2.3, =0.0.1, =0.1.5, =0.1.8 and more Source cves: CVE-2024-1892 Source advisory: GHSA-CC65-XXVF-F7R9...

adyanutils (>=0.4.0, <=0.8.6), angeltools (>=0.1.1, <=0.2.3.post5) +46 more potentially affected by CVE-2024-1892 via scrapy (>=2.0.1, <=2.11.0)

scrapy PYPI version =2.0.1, =0.4.0, =0.1.1, =1.1.9, =2.8.3, =1.0.6, =0.0.1, =0.3.0, =0.0.2, =0.3.0a0, =0.7.2, =0.8.2 - elcrawlsdk 1.0.0 - estela-entrypoint 0.2.1 and more Source cves: CVE-2024-1892 Source advisory: OSV:GHSA-CC65-XXVF-F7R9...

adyanutils (>=0.4.0, <=0.8.6), angeltools (>=0.1.1, <=0.2.3.post5) +46 more potentially affected by CVE-2024-1892 via scrapy (>=2.0.1, <=2.11.0)

scrapy PYPI version =2.0.1, =0.4.0, =0.1.1, =1.1.9, =2.8.3, =1.0.6, =0.0.1, =0.3.0, =0.0.2, =0.3.0a0, =0.7.2, =0.8.2 - elcrawlsdk 1.0.0 - estela-entrypoint 0.2.1 and more Source cves: CVE-2024-1892 Source advisory: GHSA-CC65-XXVF-F7R9...