eve@0.0.8 vulnerabilities
Python REST API for Humans.
-
latest version
2.1.0
-
latest non vulnerable version
-
first published
12 years ago
-
latest version published
a year ago
-
licenses detected
- [0,)
Direct Vulnerabilities
Known vulnerabilities in the eve package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
Affected versions of this package are vulnerable to Incorrect Type Conversion or Cast where different types are compared, leading to an invalid state. This issue makes the nested code block non-executable, producing invalid data. How to fix Incorrect Type Conversion or Cast? Upgrade |
[,2.0.4)
|
eve is an open source Python REST API framework. Affected versions of this package are vulnerable to Arbitrary Code Injection via the User input generated queries were not fully traversed in the sanitization. Therefore, the blacklist for mongo queries could be bypassed, allowing an attacker to manipulate |
[,0.7.5)
|