VDB
Sign up
—

PYSEC-2023-116

Quick fix

PYSEC-2023-116 — xalpha: upgrade to the fixed version with the command below.

pip install --upgrade 'xalpha>=0.11.9'

Details

xalpha v0.11.4 is vulnerable to Remote Command Execution (RCE).

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/xalpha
Introduced in: 0.11.4Fixed in: 0.11.9
Fixpip install --upgrade 'xalpha>=0.11.9'

References