—
PYSEC-2021-380
Quick fix
PYSEC-2021-380 — ops-cli: upgrade to the fixed version with the command below.
pip install --upgrade 'ops-cli>=2.0.5'Details
Ops CLI version 2.0.4 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkout_repo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine.
Are you affected?
Enter the version of the package you're using.