—

PYSEC-2020-232

Quick fix

PYSEC-2020-232 — freewvs: upgrade to the fixed version with the command below.

pip install --upgrade 'freewvs>=18bbf2043e53f69e0119d24f8ae4edb274afb9b2'

Details

In freewvs before 0.1.1, a user could create a large file that freewvs will try to read, which will terminate a scan process. This has been patched in 0.1.1.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/freewvs

Introduced in: 0Fixed in: 18bbf2043e53f69e0119d24f8ae4edb274afb9b2

Fixpip install --upgrade 'freewvs>=18bbf2043e53f69e0119d24f8ae4edb274afb9b2'

References

https://github.com/schokokeksorg/freewvs/commit/18bbf2043e53f69e0119d24f8ae4edb274afb9b2[FIX]
https://github.com/schokokeksorg/freewvs/security/advisories/GHSA-9cfv-9463-8gqv[ADVISORY]