—
PYSEC-2019-24
Quick fix
PYSEC-2019-24 — invenio-app: upgrade to the fixed version with the command below.
pip install --upgrade 'invenio-app>=1.1.1'Details
invenio-app before 1.1.1 allows host header injection.
Are you affected?
Enter the version of the package you're using.