Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

pypi

Scrapy

pypi · A high-level Web Crawling and Web Scraping framework · Repository · Package

Security Advisories for Scrapy in pypi

Moderate
over 1 year ago

Scrapy allows redirect following in protocols other than HTTP GSA_kwCzR0hTQS0yM2o0LW13NzYtNXY3aM4AA8EP

pypi Scrapy
Moderate
over 1 year ago

Scrapy's redirects ignoring scheme-specific proxy settings GSA_kwCzR0hTQS1qbTN2LXF4bWgtaHh3ds4AA8EO

pypi Scrapy
Moderate
over 1 year ago

Scrapy leaks the authorization header on same-domain but cross-origin redirects GSA_kwCzR0hTQS00cXFxLTl2cWYtM2gzZs4AA8EN

pypi Scrapy
High
over 1 year ago

Scrapy decompression bomb vulnerability GSA_kwCzR0hTQS03ajdtLXY3bTMtanFtN84AA5Vh

pypi scrapy
High
over 1 year ago

Scrapy authorization header leakage on cross-domain redirect GSA_kwCzR0hTQS1jdzlqLXEzdmYtaHJyds4AA5Ui

pypi scrapy
High
over 1 year ago

Scrapy vulnerable to ReDoS via XMLFeedSpider GSA_kwCzR0hTQS1jYzY1LXh4dmYtZjdyOc4AA5UB

pypi scrapy
Moderate
about 3 years ago

Scrapy before 2.6.2 and 1.8.3 vulnerable to one proxy sending credentials to another GSA_kwCzR0hTQS05eDhtLTJ4cGYtY3JwM84AAtvM

pypi scrapy
High
over 3 years ago

Scrapy denial of service vulnerability GSA_kwCzR0hTQS1oN3dtLXBoNDMtYzM5cM4AAZaj

pypi scrapy
Moderate
over 3 years ago

Scrapy cookie-setting is not restricted based on the public suffix list GSA_kwCzR0hTQS1tZmptLXZoNTQtM2Y5Ns0viQ

pypi scrapy
Moderate
over 3 years ago

Incorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor in scrapy GSA_kwCzR0hTQS1janZyLW1majctajRqOM0viA

pypi scrapy
Moderate
almost 4 years ago

Scrapy HTTP authentication credentials potentially leaked to target websites GSA_kwCzR0hTQS1qd3FwLTI4Z2YtcDQ5OM0WOQ

pypi Scrapy

Filter by Severity

Moderate 7 High 4