VDB
Sign up
—

PYSEC-2021-101

Quick fix

PYSEC-2021-101 — localstack: upgrade to the fixed version with the command below.

pip install --upgrade 'localstack>=0.12.6.1'

Details

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/localstack
Introduced in: 0Fixed in: 0.12.6.1
Fixpip install --upgrade 'localstack>=0.12.6.1'

References