—
PYSEC-2021-383
Quick fix
PYSEC-2021-383 — nameko: upgrade to the fixed version with the command below.
pip install --upgrade 'nameko>=2.14.0'Details
Nameko through 2.13.0 can be tricked into performing arbitrary code execution when deserializing the config file.
Are you affected?
Enter the version of the package you're using.