Homepage

rtc-tools@2.4.0a5 vulnerabilities

Toolbox for control and optimization of water systems.

  • latest version

    2.8.0.dev0

  • latest non vulnerable version

    2.8.0.dev0

  • first published

    7 years ago

  • latest version published

    4 months ago

  • licenses detected

  • View rtc-tools package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the rtc-tools package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    XML External Entity (XXE) Injection

    rtc-tools is a Toolbox for control and optimization of water systems.

    Affected versions of this package are vulnerable to XML External Entity (XXE) Injection due to unsafe parsing of __path_xml. An attacker could potentially exploit this by providing malicious XML input, leading to unauthorised file access or network requests.

    How to fix XML External Entity (XXE) Injection?

    Upgrade rtc-tools to version 2.6.1 or higher.

    [,2.6.1)
    • C
    Deserialization of Untrusted Data

    rtc-tools is a Toolbox for control and optimization of water systems.

    Affected versions of this package are vulnerable to Deserialization of Untrusted Data rough cashing in pickle module in csv_lookup_table_mixin.py. An attacker could potentially execute arbitrary code by exploiting the deserialisation of untrusted data, leading to a full server compromise.

    How to fix Deserialization of Untrusted Data?

    Upgrade rtc-tools to version 2.6.1 or higher.

    [,2.6.1)
    Go back to all versions of this package