Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/taipy@4.0.0
Typepypi
Namespace
Nametaipy
Version4.0.0
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-yt4k-m42h-8bd1
vulnerability_id VCID-yt4k-m42h-8bd1
summary Taipy is an open-source Python library for easy, end-to-end application development for data scientists and machine learning engineers. In affected versions session cookies are served without Secure and HTTPOnly flags. This issue has been addressed in release version 4.0.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
references
0
reference_url https://github.com/Avaiga/taipy/security/advisories/GHSA-r3jq-4r5c-j9hp
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://github.com/Avaiga/taipy/security/advisories/GHSA-r3jq-4r5c-j9hp
fixed_packages
0
url pkg:pypi/taipy@4.0.0
purl pkg:pypi/taipy@4.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/taipy@4.0.0
aliases CVE-2024-47833, GHSA-r3jq-4r5c-j9hp, PYSEC-2024-168
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yt4k-m42h-8bd1
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/taipy@4.0.0