Vulnerability	Vulnerable Version
M Denial of Service (DoS) rply is a Python parser generator, that also works with RPython. Affected versions of this package are vulnerable to Denial of Service (DoS). The package creates temporary files insecurely. This could be abused by an attacker to conduct denial of service attacks. How to fix Denial of Service (DoS)? Upgrade `rply` to version 0.7.4 or higher.	[,0.7.4)
M Insecure use of temporary file `rply` is a pure Python Lex/Yacc that works with RPython Affected versions of this package are vulnerable to Insecure use of temporary file attacks. The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7.1 allows local users to spoof cache data by pre-creating a temporary `rply-*.json` file with a predictable name. How to fix Insecure use of temporary file? Upgrade to version `0.7.1` or greater.	[,0.7.0)

Denial of Service (DoS)

rply is a Python parser generator, that also works with RPython.

Affected versions of this package are vulnerable to Denial of Service (DoS). The package creates temporary files insecurely. This could be abused by an attacker to conduct denial of service attacks.

How to fix Denial of Service (DoS)?

Upgrade rply to version 0.7.4 or higher.

[,0.7.4)

Insecure use of temporary file

rply is a pure Python Lex/Yacc that works with RPython

Affected versions of this package are vulnerable to Insecure use of temporary file attacks. The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7.1 allows local users to spoof cache data by pre-creating a temporary rply-*.json file with a predictable name.

How to fix Insecure use of temporary file?

Upgrade to version 0.7.1 or greater.

[,0.7.0)

Go back to all versions of this package