Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

kas

3 known vulnerabilities (3 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 low
Registry
PyPI

Advisories 3

  • kas: Persistent SSH Host Key Checking Disablement

    Affected: fixed in 5.4.

  • kas's late signature validation may allow unnoticed repository manipulations

    Affected: from 4.8, fixed in 5.3.

  • kas checks out SHA-like git branches as valid commits

    Affected: fixed in 5.3.