—

PYSEC-2022-187

Quick fix

PYSEC-2022-187 — tkvideoplayer: upgrade to the fixed version with the command below.

pip install --upgrade 'tkvideoplayer>=2.0.0'

Details

TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideoplayer prior to 2.0.0 can theoretically lead to performance degradation. There are no known workarounds. This issue has been patched and users are advised to upgrade to version 2.0.0 or later.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/tkvideoplayer

Introduced in: 0Fixed in: 2.0.0

Fixpip install --upgrade 'tkvideoplayer>=2.0.0'

References

https://github.com/PaulleDemon/tkVideoPlayer/security/advisories/GHSA-jmhj-vh4q-hhmq[ADVISORY]
https://github.com/PaulleDemon/tkVideoPlayer/issues/3[REPORT]