Homepage

preqs@0.1.0b3 vulnerabilities

A simple (and fast) requirements.txt file generator.

  • latest version

    0.1.0.dev1

  • latest non vulnerable version

    0.1.0.dev1

  • first published

    4 months ago

  • latest version published

    4 months ago

  • licenses detected

  • View preqs package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the preqs package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Directory Traversal

    preqs is an A simple (and fast) requirements.txt file generator.

    Affected versions of this package are vulnerable to Directory Traversal due to improper path sanitization in the ArgParser._sanitise_path method. An attacker could manipulate the PATH argument to traverse directories using "..", potentially accessing or modifying unintended file system locations.

    How to fix Directory Traversal?

    Upgrade preqs to version 0.1.0b4 or higher.

    [,0.1.0b4)
    Go back to all versions of this package