Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNnNzUtNjkzOC13eDU4

python-docutils allows insecure usage of temporary files

Permalink: https://github.com/advisories/GHSA-cg75-6938-wx58
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNnNzUtNjkzOC13eDU4
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: about 4 years ago
Updated: over 1 year ago

CVSS Score: 9.1
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Identifiers: GHSA-cg75-6938-wx58, CVE-2009-5042
References:

Blast Radius: 45.6

Affected Packages

pypi:docutils

Dependent packages: 2,030
Dependent repositories: 102,533
Downloads: 117,509,171 last month
Affected Version Ranges: >= 0.5, < 0.6
Fixed in: 0.6
All affected versions:
All unaffected versions: 0.3.5, 0.3.7, 0.3.9, 0.8.1, 0.9.1, 0.13.1, 0.15.1, 0.15.2, 0.17.1, 0.18.1, 0.20.1, 0.21.1, 0.21.2