rope@0.10.2 vulnerabilities

a python refactoring library...

Direct Vulnerabilities

Known vulnerabilities in the rope package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • C
Arbitrary Code Execution

rope is a python refactoring library.

Affected versions of this package are vulnerable to Arbitrary Code Execution. It allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load.

How to fix Arbitrary Code Execution?

Upgrade rope to version 0.11.0 or higher.

[,0.11.0)