Tools collection for antilles project
[email protected] has vulnerabilities — update to latest
Update to >= 1.0.1 to fix known vulnerabilities
| Severity | ID | Summary | Fixed in |
|---|---|---|---|
| high | CVE-2021-3840 | Antilles Dependency Confusion Vulnerability | 1.0.1 |
| unknown | CVE-2021-3840 | A dependency confusion vulnerability was reported in the Antilles open-source software prior to version 1.0.1 that could allow for remote code execution during installation due to a package listed in requirements.txt not existing in the public package index (PyPi). MITRE classifies this weakness as an Uncontrolled Search Path Element (CWE-427) in which a private package dependency may be replaced by an unauthorized package of the same name published to a well-known public repository such as PyPi | 1.0.1 |
Get this data programmatically — free, no authentication.
curl https://depscope.dev/api/check/pypi/antilles-toolsLast updated · 2021-09-27T04:38:25.542779Z