VulnerableCode Package Details - pkg:pypi/recurly@2.4.2

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:pypi/recurly@2.4.2

Essentials
History (1)

purl	pkg:pypi/recurly@2.4.2

Next non-vulnerable version	2.4.5
Latest non-vulnerable version	2.6.2
Risk

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-gt4d-yrah-hqcy Aliases: CVE-2017-0906 GHSA-38rv-5jqc-m2cv PYSEC-2017-68	The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource.get" method that could result in compromise of API keys or other critical resources.	2.4.5 Affected by 0 other vulnerabilities. 2.5.1 Affected by 0 other vulnerabilities. 2.6.2 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-gt4d-yrah-hqcy
Aliases:
CVE-2017-0906
GHSA-38rv-5jqc-m2cv
PYSEC-2017-68

The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource.get" method that could result in compromise of API keys or other critical resources.

2.4.5
Affected by 0 other vulnerabilities.

2.5.1
Affected by 0 other vulnerabilities.

2.6.2
Affected by 0 other vulnerabilities.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-02T04:04:54.877774+00:00	Pypa Importer	Affected by	VCID-gt4d-yrah-hqcy	https://github.com/pypa/advisory-database/blob/main/vulns/recurly/PYSEC-2017-68.yaml	38.6.0