fabric@1.9.1 vulnerabilities

High level SSH command execution

Direct Vulnerabilities

Known vulnerabilities in the fabric package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • L
Information Exposure

fabric is a Fabric is a simple, Pythonic tool for remote execution and deployment. Fabric is vulnerable to information disclosure. When uploading templates using the upload_template() function, if the intended destination is invalid, the file ends up world-readable in the home folder.

[0.9.0,1.13.1]