Is uefi-firmware safe to use?

uefi-firmware has 2 known vulnerabilities on the latest version (1.11). DepScope rates its health at 13/100 (critical risk).

What is the latest version of uefi-firmware?

The latest version of uefi-firmware is 1.11, released 2023-08-10.

Yes. uefi-firmware has 2 known vulnerabilities. See depscope.dev/pkg/pypi/uefi-firmware for details.

No, uefi-firmware is actively maintained. Latest release: 1.11 (2023-08-10).

Popular alternatives to uefi-firmware in PyPI include: boto3/, packaging, urllib3/, certifi, urllib3.

uefi-firmware is licensed under BSD.

pypiv1.11

Various data structures and parsing tools for UEFI firmware.

License BSDpermissive10 versions1 maintainers1 deps

/ 100

Health

do not use

uefi-firmware has critical vulnerabilities — do not use

Health breakdown0 – 100

0/25

maintenance

0/20

popularity

5/25

security

6/15

maturity

2/15

community

Vulnerabilities

2 critical

Advisories (2)

Severity	ID	Summary	Fixed in
critical	GHSA-2689-5p89-6j3j	UEFI Firmware Parser has a stack out-of-bounds write in tiano decompressor MakeTable	—
critical	GHSA-hm2w-vr2p-hq7w	UEFI Firmware Parser has a heap out-of-bounds write in tiano decompressor ReadCLen	—

Dependencies (1)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/uefi-firmware