Lucene search
+L

1 matches found

OSV
OSV
added 2021/01/25 3:25 p.m.7 views

MGASA-2021-0054 Updated python-pip packages fix security vulnerabilities

It was discovered that pip did not properly sanitize the filename during pip install. A remote attacker could possible use this issue to read and write arbitrary files on the host filesystem as root, resulting in a directory traversal attack CVE-2019-20916. urllib3 before 1.25.9 allows CRLF...

7.5CVSS7.2AI score0.03028EPSS
SaveExploits1References5
Rows per page
Query Builder