pypiserver@1.1.8b1 vulnerabilities
A minimal PyPI server for use with pip/easy_install.
-
latest version
2.1.1
-
latest non vulnerable version
-
first published
13 years ago
-
latest version published
22 days ago
-
licenses detected
- (BSD-2-Clause OR Zlib)[0.1.2,)
Direct Vulnerabilities
Known vulnerabilities in the pypiserver package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
pypiserver is a minimal PyPI server for use with pip/easy_install. Affected versions of this package are vulnerable to CRLF Injection due to not escaping new line characters when redirecting users. How to fix CRLF Injection? Upgrade |
[,1.2.6)
|
pypiserver is a minimal PyPI server for use with pip/easy_install. Affected versions of this package are vulnerable to CRLF Injection. A malicious user could set arbitrary HTTP headers and possibly conduct XSS attacks via a How to fix CRLF Injection? Upgrade |
[,1.2.6)
|