Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/rdiffweb@2.10.6
purl pkg:pypi/rdiffweb@2.10.6
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-2n1n-8nzg-xuh3 IKUS Rdiffweb allows an attacker with any valid or stolen access token to act as other users IKUS Rdiffweb version 2.10.5 and below have an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users. The API does not enforce binding between the authenticated subject and the targeted user/tenant, so crafted requests can read or modify other users data and, in some cases, perform privileged actions. This issue may enable cross-tenant access. Fixed in version 2.10.6. CVE-2025-67796
GHSA-v4gp-hf5j-4566

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-07T20:54:39.533997+00:00 GHSA Importer Fixing VCID-2n1n-8nzg-xuh3 https://github.com/advisories/GHSA-v4gp-hf5j-4566 38.6.0
2026-06-06T08:24:27.478191+00:00 GitLab Importer Fixing VCID-2n1n-8nzg-xuh3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/rdiffweb/CVE-2025-67796.yml 38.6.0
2026-06-04T17:02:55.881632+00:00 GithubOSV Importer Fixing VCID-2n1n-8nzg-xuh3 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-v4gp-hf5j-4566/GHSA-v4gp-hf5j-4566.json 38.6.0