GHSA-3cwm-7jmm-774w

Source

https://github.com/advisories/GHSA-3cwm-7jmm-774w

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-3cwm-7jmm-774w/GHSA-3cwm-7jmm-774w.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-3cwm-7jmm-774w

Aliases

Published

2022-05-05T00:29:41Z

Modified

2024-12-07T05:28:23.666295Z

Summary

Deserialization of Untrusted Data in Beaker

Details

The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.

Database specific

{
    "severity": "MODERATE",
    "cwe_ids": [
        "CWE-502"
    ],
    "nvd_published_at": "2020-06-26T20:15:00Z",
    "github_reviewed_at": "2022-07-07T23:11:39Z",
    "github_reviewed": true
}

References

Affected packages

PyPI / beaker

Package

Name: beaker; View open source insights on deps.dev
Purl: pkg:pypi/beaker

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

1.11.0

Affected versions

0.*

0.5

0.6

0.6.1

0.6.2

0.6.3

0.7

0.7.1

0.7.2

0.7.3

0.7.4

0.7.5

0.8

0.8.1

0.9

0.9.1

0.9.2

0.9.3

0.9.4

0.9.5

1.*

1.0

1.0.1

1.0.2

1.0.3

1.1

1.1.1

1.1.2

1.1.3

1.2

1.2.1

1.2.2

1.2.3

1.3

1.3.1dev

1.3.1

1.4

1.4.1

1.4.2

1.4.3

1.5

1.5.1

1.5.2

1.5.3

1.5.4

1.6

1.6.1

1.6.2

1.6.3

1.6.4

1.6.5

1.6.5.post1

1.7.0dev

1.7.0

1.8.0

1.8.1

1.9.0

1.9.1

1.10.0

1.10.1

1.11.0