—
PYSEC-2020-112
Quick fix
PYSEC-2020-112 — tendenci: upgrade to the fixed version with the command below.
pip install --upgrade 'tendenci>=12.0.11'Details
Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py.
Are you affected?
Enter the version of the package you're using.