Insecure File Permissions Affecting dplib-py package, versions [,1.1.0)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-PYTHON-DPLIBPY-8145484
- published2 Oct 2024
- disclosed1 Oct 2024
- creditUnknown
Introduced: 1 Oct 2024
CVE NOT AVAILABLE CWE-732 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade dplib-py to version 1.1.0 or higher.
Overview
dplib-py is a Python implementation of the Data Package standard
Affected versions of this package are vulnerable to Insecure File Permissions allowing attackers to access files outside intended directories or gain unauthorized access to sensitive files.
Workaround
If updating isn't possible, carefully review and sanitize all inputs to path and file operations.