VDB
Sign up
—

PYSEC-2020-44

Quick fix

PYSEC-2020-44 — gerapy: upgrade to the fixed version with the command below.

pip install --upgrade 'gerapy>=e8446605eb2424717418eae199ec7aad573da2d2'

Details

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/gerapy
Introduced in: 0Fixed in: e8446605eb2424717418eae199ec7aad573da2d2
Fixpip install --upgrade 'gerapy>=e8446605eb2424717418eae199ec7aad573da2d2'

References