—

PYSEC-2021-68

Quick fix

PYSEC-2021-68 — nfstream: upgrade to the fixed version with the command below.

pip install --upgrade 'nfstream>=6.0.0'

Details

An issue was discovered in NFStream 5.2.0. Because some allocated modules are not correctly freed, if the nfstream object is directly destroyed without being used after it is created, it will cause a memory leak that may result in a local denial of service (DoS).

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/nfstream

Introduced in: 0Fixed in: 6.0.0

Fixpip install --upgrade 'nfstream>=6.0.0'

References

https://github.com/ntop/nDPI/issues/994[REPORT]
https://github.com/advisories/GHSA-whmq-cfm5-j8mj[ADVISORY]