VDB
Sign up
HIGH

GHSA-r82c-j4mq-5xfw

Update bitlyshortener to >=0.5.0 to prevent generating some invalid short URLs

Quick fix

GHSA-r82c-j4mq-5xfw — bitlyshortener: upgrade to the fixed version with the command below.

pip install --upgrade 'bitlyshortener>=0.5.0'

Details

### Impact Due to a sudden upstream breaking change by Bitly, versions of `bitlyshortener` <0.5.0 can generate an invalid short URL when a vanity domain exists.

### Patches Upgrading `bitlyshortener` to 0.5.0 or newer will prevent the generation of any such invalid short URLs.

### References * [Release notes](https://github.com/impredicative/bitlyshortener/releases)

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/bitlyshortener
Introduced in: 0Fixed in: 0.5.0
Fixpip install --upgrade 'bitlyshortener>=0.5.0'

References