—
PYSEC-2021-433
Quick fix
PYSEC-2021-433 — s3scanner: upgrade to the fixed version with the command below.
pip install --upgrade 's3scanner>=2.0.2'Details
S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a <Key>../ substring in a ListBucketResult element.
Are you affected?
Enter the version of the package you're using.