Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

logilab-common

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
PyPI

Advisories 2

  • The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified…

    Affected: fixed in 0.61.0; fixed in 0.60.1.

  • The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite…

    Affected: fixed in 0.60.1; fixed in 0.61.0.