Search for packages
| purl | pkg:pypi/recurly@2.2.22 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-gt4d-yrah-hqcy | The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource.get" method that could result in compromise of API keys or other critical resources. |
CVE-2017-0906
GHSA-38rv-5jqc-m2cv PYSEC-2017-68 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-04T17:41:23.832462+00:00 | GithubOSV Importer | Fixing | VCID-gt4d-yrah-hqcy | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/01/GHSA-38rv-5jqc-m2cv/GHSA-38rv-5jqc-m2cv.json | 38.6.0 |
| 2026-06-02T04:38:46.217209+00:00 | GitLab Importer | Fixing | VCID-gt4d-yrah-hqcy | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/recurly/CVE-2017-0906.yml | 38.6.0 |
| 2026-06-02T04:04:55.689551+00:00 | Pypa Importer | Fixing | VCID-gt4d-yrah-hqcy | https://github.com/pypa/advisory-database/blob/main/vulns/recurly/PYSEC-2017-68.yaml | 38.6.0 |