Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/taipy@2.3.0
Typepypi
Namespace
Nametaipy
Version2.3.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.0.0
Latest_non_vulnerable_version4.0.0
Affected_by_vulnerabilities
0
url VCID-yt4k-m42h-8bd1
vulnerability_id VCID-yt4k-m42h-8bd1
summary Taipy is an open-source Python library for easy, end-to-end application development for data scientists and machine learning engineers. In affected versions session cookies are served without Secure and HTTPOnly flags. This issue has been addressed in release version 4.0.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
references
0
reference_url https://github.com/Avaiga/taipy/security/advisories/GHSA-r3jq-4r5c-j9hp
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://github.com/Avaiga/taipy/security/advisories/GHSA-r3jq-4r5c-j9hp
fixed_packages
0
url pkg:pypi/taipy@4.0.0
purl pkg:pypi/taipy@4.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/taipy@4.0.0
aliases CVE-2024-47833, GHSA-r3jq-4r5c-j9hp, PYSEC-2024-168
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yt4k-m42h-8bd1
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/taipy@2.3.0