Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI4MmMtajRtcS01eGZ3

Update bitlyshortener to >=0.5.0 to prevent generating some invalid short URLs

Impact

Due to a sudden upstream breaking change by Bitly, versions of bitlyshortener <0.5.0 can generate an invalid short URL when a vanity domain exists.

Patches

Upgrading bitlyshortener to 0.5.0 or newer will prevent the generation of any such invalid short URLs.

References

• Release notes

Permalink: https://github.com/advisories/GHSA-r82c-j4mq-5xfw
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI4MmMtajRtcS01eGZ3
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: about 3 years ago
Updated: 11 months ago

Identifiers: GHSA-r82c-j4mq-5xfw
References:

• https://github.com/impredicative/bitlyshortener/security/advisories/GHSA-r82c-j4mq-5xfw
• https://github.com/impredicative/bitlyshortener/commit/3d412feb77f3daf6f71536463734c2119a55968d
• https://github.com/impredicative/bitlyshortener/releases/tag/0.5.0
• https://pypi.org/project/bitlyshortener/
• https://github.com/advisories/GHSA-r82c-j4mq-5xfw

Affected Packages