VDB
Sign up
—

PYSEC-2025-44

Quick fix

PYSEC-2025-44 — django-helpdesk: upgrade to the fixed version with the command below.

pip install --upgrade 'django-helpdesk>=0d91fcca0b6a98a4e7248368bc1dc4f06c682159'

Details

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/django-helpdesk
Introduced in: 0Fixed in: 0d91fcca0b6a98a4e7248368bc1dc4f06c682159
Fixpip install --upgrade 'django-helpdesk>=0d91fcca0b6a98a4e7248368bc1dc4f06c682159'

References