7 matches found
fief-server (>=0.24.0, <=0.24.7) potentially affected by CVE-2025-68481 via fastapi-users (10.4.1)
fastapi-users PYPI version 10.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastapi-users and may be impacted: - fief-server =0.24.0, =0.24.7 Source cves: CVE-2025-68481 Source advisory: OSV:PYSEC-2026-1363...
fief-server (>=0.24.8, <=0.25.3), fps-auth (>=0.1.5, <=0.1.10) +1 more potentially affected by CVE-2025-68481 via fastapi-users (11.0.0)
fastapi-users PYPI version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastapi-users and may be impacted: - fief-server =0.24.8, =0.1.5, =0.8.0, =0.9.0 Source cves: CVE-2025-68481 Source advisory: OSV:PYSEC-2026-1363...
fief-server (>=0.22.1, <=0.23.2) potentially affected by CVE-2025-68481 via fastapi-users (10.4.0)
fastapi-users PYPI version 10.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastapi-users and may be impacted: - fief-server =0.22.1, =0.23.2 Source cves: CVE-2025-68481 Source advisory: OSV:PYSEC-2026-1363...
fief-server (>=0.22.1, <=0.23.2) potentially affected by CVE-2025-68481 via fastapi-users (10.4.0)
fastapi-users PYPI version 10.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastapi-users and may be impacted: - fief-server =0.22.1, =0.23.2 Source cves: CVE-2025-68481 Source advisory: OSV:GHSA-5J53-63W8-8625...
fief-server (>=0.24.0, <=0.24.7) potentially affected by CVE-2025-68481 via fastapi-users (10.4.1)
fastapi-users PYPI version 10.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastapi-users and may be impacted: - fief-server =0.24.0, =0.24.7 Source cves: CVE-2025-68481 Source advisory: OSV:GHSA-5J53-63W8-8625...
fief-server (>=0.24.8, <=0.25.3), fps-auth (>=0.1.5, <=0.1.10) +1 more potentially affected by CVE-2025-68481 via fastapi-users (11.0.0)
fastapi-users PYPI version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastapi-users and may be impacted: - fief-server =0.24.8, =0.1.5, =0.8.0, =0.9.0 Source cves: CVE-2025-68481 Source advisory: OSV:GHSA-5J53-63W8-8625...
fief-server Server-Side Template Injection vulnerability
Server-Side Template Injection Overview of the Vulnerability Server-Side Template Injection SSTI is a vulnerability within application templating engines where user input is improperly handled and is embedded into the template, possibly leading code being executed. An attacker can use SSTI to...