—
PYSEC-2020-25
Quick fix
PYSEC-2020-25 — autobahn: upgrade to the fixed version with the command below.
pip install --upgrade 'autobahn>=20.12.3'Details
Autobahn|Python before 20.12.3 allows redirect header injection.
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://github.com/crossbario/autobahn-python/compare/v20.12.2...v20.12.3[WEB]
- https://github.com/crossbario/autobahn-python[WEB]
- https://github.com/crossbario/autobahn-python/pull/1439[WEB]
- https://pypi.org/project/autobahn/20.12.3/[PACKAGE]
- https://autobahn.readthedocs.io/en/latest/changelog.html[WEB]
- https://github.com/advisories/GHSA-gwp7-vqr5-h33h[ADVISORY]