Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

pipreqs

1 known vulnerability, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
1
Registry
PyPI

Advisories 1

  • A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the…

    Affected: from 0.3.0, fixed in 0.4.12.